| #951 | Animations for Blocks | 99 | 1 | 0 | 10k+ | | | plugin header no license |
| #952 | Animentor – Lottie & Bodymovin for Elementor | 70 | 18 | 8 | 4k+ | | | Output is not escaped |
| #953 | annasta Filters for WooCommerce | 32 | 1,073 | 441 | 2k+ | | | Text Domain Mismatch |
| #954 | Announce from the Dashboard | 38 | 138 | 24 | 7k+ | | | Non Singular String Literal Domain |
| #955 | Announcement Bar | 38 | 192 | 61 | 3k+ | | | Non Singular String Literal Domain |
| #956 | Announcer – Sticky Message Banner & Notification Bar | 41 | 110 | 27 | 10k+ | | | Output is not escaped |
| #957 | Anonymous Restricted Content | 43 | 22 | 24 | 1k+ | | | Unsafe printing function |
| #958 | Another Mailchimp Widget | 71 | 28 | 17 | 4k+ | | | Missing Translators Comment |
| #959 | AWP Classifieds | 78 | 11 | 9 | 3k+ | | | Output is not escaped |
| #960 | Ansar Import – One Click Starter Sites – for Elementor & Themes | 48 | 27 | 116 | 10k+ | | | Non-prefixed global variable |
| #961 | AnsPress – Question and answer | 35 | 22 | 778 | 3k+ | | | Non-prefixed function |
| #962 | Anti-Captcha (anti-spam botblocker) | 56 | 23 | 26 | 1k+ | | | rand mt rand |
| #963 | Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter | 31 | 57 | 196 | 50k+ | | | Nonce verification recommended |
| #964 | Anti-spam Reloaded | 43 | 19 | 19 | 2k+ | | | Output is not escaped |
| #965 | Antideo Email Validator | 35 | 38 | 98 | 800 | | | Missing nonce verification |
| #966 | Antispam | 41 | 11 | 41 | 400 | | | Missing nonce verification |
| #967 | Antispam Bee | 80 | 4 | 38 | 700k+ | | | Nonce verification recommended |
| #968 | Antispam for Elementor Forms | 91 | 3 | 3 | 1k+ | | | Missing Translators Comment |
| #969 | Anti-Spambot | 97 | 3 | 2 | 500 | | | Missing direct file access protection |
| #970 | AntiVirus | 99 | 2 | 1 | 30k+ | | | Missing direct file access protection |
| #971 | Antom Payments | 37 | 62 | 73 | 800 | | | badly named files |
| #972 | AnWP Post Grid and Post Carousel Slider for Elementor | 48 | 758 | 171 | 20k+ | | | Text Domain Mismatch |
| #973 | Any Mobile Theme Switcher | 38 | 69 | 59 | 20k+ | | | Output is not escaped |
| #974 | All-in-one Chat Button by anychat.one | 37 | 119 | 69 | 900 | | | Text Domain Mismatch |
| #975 | AnyComment | 17 | 445 | 449 | 5k+ | | | Output is not escaped |
| #976 | Anything Order by Terms | 39 | 48 | 93 | 1k+ | | | Direct Query |
| #977 | Anything Popup | 37 | 164 | 185 | 2k+ | | | Non-prefixed global variable |
| #978 | Dynific Addons for Elementor (formerly AnyWhere Elementor) | 84 | 33 | 5 | 70k+ | | | Text Domain Mismatch |
| #979 | Apaczka.pl WooCommerce | 31 | 99 | 276 | 1k+ | | | Non-prefixed global variable |
| #980 | Apaczka: integracja z WooCommerce | 37 | 8 | 316 | 3k+ | | | Non-prefixed global variable |
| #981 | Apaczka.pl Mapa Punktów | 87 | 8 | 9 | 2k+ | | | Missing nonce verification |
| #982 | APCu Manager | 31 | 153 | 136 | 10k+ | | | Output is not escaped |
| #983 | Blazeo | 92 | 4 | 5 | 400 | | | Missing Version |
| #984 | Tuskcode Map Pro for Bing Maps | 35 | 59 | 359 | 600 | | | Direct Query |
| #985 | API KEY for Google Maps | 94 | 14 | 5 | 40k+ | | | Text Domain Mismatch |
| #986 | Aplazame | 38 | 34 | 39 | 500 | | | Non-prefixed global variable |
| #987 | Apollo13 Framework Extensions | 27 | 171 | 273 | 20k+ | | | Non-prefixed global variable |
| #988 | App Builder – Create Native Android & iOS Apps On The Flight | 33 | 73 | 119 | 600 | | | Text Domain Mismatch |
| #989 | App for Cloudflare® | 98 | 10 | 1 | 1k+ | | | wp function not compatible with requires wp |
| #990 | Append extensions on Pages | 84 | 7 | 3 | 800 | | | Missing direct file access protection |
| #991 | Append Link on Copy | 74 | 23 | 5 | 800 | | | Output is not escaped |
| #992 | Application Passwords Enable | 100 | 1 | 0 | 800 | | | invalid tested upto minor |
| #993 | ApplyOnline – Application Form Builder and Manager | 30 | 345 | 244 | 2k+ | | | Output is not escaped |
| #994 | AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) | 35 | 165 | 37 | 7k+ | | | Missing Arg Domain |
| #995 | Appointment Booking Calendar | 25 | 327 | 1,055 | 1k+ | | | Non-prefixed global variable |
| #996 | Appointment Hour Booking – Booking Calendar | 25 | 262 | 1,253 | 10k+ | | | Non-prefixed global variable |
| #997 | AppPresser – Mobile App Framework | 29 | 262 | 214 | 1k+ | | | Text Domain Mismatch |
| #998 | AppScenic – Smart AI Dropshipping | 70 | 16 | 41 | 3k+ | | | Dynamic hook name |
| #999 | Aqua Page Builder | 32 | 320 | 114 | 2k+ | | | Output is not escaped |
| #1000 | Aquila Admin Theme | 35 | 151 | 329 | 3k+ | | | Non-prefixed global variable |