| #1051 | WPS Limit Login | 39 | 152 | 76 | 100k+ | | | Output is not escaped |
| #1052 | Email Marketing for WooCommerce by Omnisend | 35 | 12 | 21 | 40k+ | | | Non-prefixed function |
| #1053 | CookieAdmin – Cookie Consent Banner | 37 | 43 | 86 | 400k+ | | | Nonce verification recommended |
| #1054 | SportsPress – Sports Club & League Manager | 23 | 459 | 2,246 | 10k+ | | | Non-prefixed global variable |
| #1055 | WPFront User Role Editor | 35 | 333 | 578 | 30k+ | | | Output is not escaped |
| #1056 | Blog Designer | 59 | 62 | 83 | 10k+ | | | Text Domain Mismatch |
| #1057 | GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time | 25 | 614 | 1,431 | 40k+ | | | Non-prefixed global variable |
| #1058 | Search & Filter | 69 | 21 | 28 | 50k+ | | | Input is not sanitized |
| #1059 | Wallet for WooCommerce | 40 | 32 | 525 | 20k+ | | | Non-prefixed hook name |
| #1060 | WP-UserOnline | 33 | 111 | 161 | 10k+ | | | Output is not escaped |
| #1061 | Countdown Timer – Widget Countdown | 29 | 290 | 152 | 10k+ | | | Output is not escaped |
| #1062 | bbp style pack | 25 | 1,419 | 1,791 | 6k+ | | | Output is not escaped |
| #1063 | Frontend Admin by DynamiApps | 23 | 5,938 | 3,208 | 9k+ | | | Text Domain Mismatch |
| #1064 | FG Joomla to WordPress | 27 | 278 | 101 | 7k+ | | | Unsafe printing function |
| #1065 | WPIDE – File Manager & Code Editor | 24 | 612 | 1,399 | 40k+ | | | Non-prefixed global variable |
| #1066 | BlossomThemes Toolkit | 35 | 347 | 52 | 30k+ | | | Output is not escaped |
| #1067 | Interactive Content – H5P | 23 | 565 | 380 | 40k+ | | | Non Singular String Literal Domain |
| #1068 | Skyboot Custom Icons for Elementor – Elementor Icons library – 14300+ Icons | 60 | 91 | 9 | 200k+ | | | Text Domain Mismatch |
| #1069 | WP Import Export Lite | 19 | 737 | 979 | 40k+ | | | Non-prefixed global variable |
| #1070 | WP VR – 360 Panorama and Virtual Tour Builder | 37 | 3 | 275 | 10k+ | | | Non-prefixed hook name |
| #1071 | WP Consent API | 86 | 2 | 10 | 200k+ | | | Input is not sanitized |
| #1072 | MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions | 31 | 663 | 273 | 2k+ | | | Text Domain Mismatch |
| #1073 | Categories Images | 63 | 10 | 21 | 50k+ | | | wp function not compatible with requires wp |
| #1074 | NewStatPress | 94 | 95 | 12 | 8k+ | | | wp function not compatible with requires wp |
| #1075 | Social Login | 41 | 8 | 110 | 5k+ | | | Input is not sanitized |
| #1076 | BlockSpare – Gutenberg Post Grid Blocks for News, Magazine & Blog Websites | 25 | 1,327 | 1,714 | 10k+ | | | Non-prefixed global variable |
| #1077 | Product Slider, Product Carousel and Product Grid Gallery for WooCommerce – WooProduct Slider | 94 | | 270 | 20k+ | | | Non-prefixed global variable |
| #1078 | Powerkit – Supercharge your WordPress Site | 61 | 67 | 116 | 10k+ | | | Non-prefixed global variable |
| #1079 | Accessibility by UserWay | 39 | 22 | 35 | 80k+ | | | Direct Query |
| #1080 | Link Whisper Free | 23 | 3,882 | 5,303 | 30k+ | | | Text Domain Mismatch |
| #1081 | Brazilian Market on WooCommerce | 75 | 4 | 51 | 70k+ | | | Missing nonce verification |
| #1082 | Increase Maximum Upload File Size | 68 | 28 | 14 | 40k+ | | | Missing Arg Domain |
| #1083 | WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping | 97 | 1 | 7 | 10k+ | | | trademarked term |
| #1084 | Maps Plugin using Google Maps for WordPress – WP Google Map | 48 | 289 | 38 | 10k+ | | | wp function not compatible with requires wp |
| #1085 | JWT Authentication for WP REST API | 84 | 27 | 41 | 60k+ | | | wp function not compatible with requires wp |
| #1086 | WP Visitor Statistics (Real Time Traffic) | 31 | 353 | 691 | 20k+ | | | Nonce verification recommended |
| #1087 | Smart Coupons For WooCommerce Coupons | 97 | 3 | 58 | 30k+ | | | Non-prefixed class |
| #1088 | Essential Content Types | 100 | | 1 | 20k+ | | | Non-prefixed class |
| #1089 | SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher | 22 | 308 | 247 | 10k+ | | | Output is not escaped |
| #1090 | Blackhole for Bad Bots | 39 | 123 | 69 | 30k+ | | | Output is not escaped |
| #1091 | Tumblr Importer | 91 | 7 | 9 | 10k+ | | | wp function not compatible with requires wp |
| #1092 | Timetable and Event Schedule by MotoPress | 24 | 456 | 232 | 30k+ | | | Output is not escaped |
| #1093 | Theme Editor | 22 | 798 | 685 | 50k+ | | | Output is not escaped |
| #1094 | Redirection | 23 | 523 | 457 | 100k+ | | | Non-prefixed global variable |
| #1095 | Asgaros Forum | 31 | 167 | 412 | 10k+ | | | Output is not escaped |
| #1096 | Metricool – Social media and site statistics | 82 | 9 | 4 | 80k+ | | | Exception output is not escaped |
| #1097 | PW WooCommerce Bulk Edit | 34 | 219 | 149 | 20k+ | | | Unsafe printing function |
| #1098 | Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) | 19 | 3,275 | 3,228 | 9k+ | | | Output is not escaped |
| #1099 | Maspik – Ultimate Spam Protection | 28 | 212 | 862 | 30k+ | | | Missing nonce verification |
| #1100 | WooCommerce Payfast Gateway | 86 | 90 | 47 | 30k+ | | | Text Domain Mismatch |