| #1051 | Attesa Extra | 26 | 316 | 151 | 1k+ | | | Output is not escaped |
| #1052 | Attribute Stock for WooCommerce – Shared Stock & Variable Quantities (Lite Version) | 29 | 481 | 313 | 2k+ | | | Text Domain Mismatch |
| #1053 | Attributes for Blocks | 99 | 1 | 4 | 4k+ | | | Non-prefixed hook name |
| #1054 | ATUM WooCommerce Inventory Management and Stock Tracking | 25 | 2,634 | 1,306 | 10k+ | | | Non Singular String Literal Domain |
| #1055 | Auction Nudge – Your eBay Listings | 76 | 18 | 6 | 1k+ | | | Missing direct file access protection |
| #1056 | Audience Analytics – by Quantcast | 76 | 17 | 3 | 1k+ | | | Text Domain Mismatch |
| #1057 | Audio Album | 99 | 2 | 1 | 4k+ | | | Discouraged text-domain loading |
| #1058 | CP Media Player – Audio Player and Video Player | 66 | 224 | 48 | 3k+ | | | Text Domain Mismatch |
| #1059 | Audio Player Block – Advanced Block for Embedding Audio Files | 100 | | 0 | 2k+ | | | No open findings |
| #1060 | Audio Story Images | 38 | 46 | 44 | 400 | | | Output is not escaped |
| #1061 | AudioIgniter Music Player | 59 | | 53 | 10k+ | | | Input is not validated |
| #1062 | Audit Trail | 34 | 90 | 107 | 10k+ | | | Unsafe printing function |
| #1063 | Aurora Heatmap | 35 | 14 | 18 | 20k+ | | | Non-prefixed global variable |
| #1064 | Australia Post WooCommerce Extension | 39 | 99 | 12 | 3k+ | | | Text Domain Mismatch |
| #1065 | Login by Auth0 | 37 | 307 | 82 | 10k+ | | | Text Domain Mismatch |
| #1066 | Authenticator | 41 | 59 | 44 | 1k+ | | | Output is not escaped |
| #1067 | Author Avatars List/Block | 32 | 85 | 135 | 4k+ | | | Non-prefixed hook name |
| #1068 | Author Bio Box | 98 | 1 | 6 | 1k+ | | | Non-prefixed global variable |
| #1069 | Author Box WP Lens | 35 | 169 | 49 | 900 | | | Unsafe printing function |
| #1070 | Author Category | 38 | 85 | 25 | 4k+ | | | Output is not escaped |
| #1071 | Author Filters | 87 | 2 | 7 | 1k+ | | | Nonce verification recommended |
| #1072 | Author Website Templates – Create Writer, Author & Publisher Websites Easily | 22 | 711 | 2,910 | 500 | | | Non-prefixed global variable |
| #1073 | Authorize.net Payments for WooCommerce | 100 | | 0 | 400 | | | No open findings |
| #1074 | Authorizer | 65 | 3 | 54 | 5k+ | | | Nonce verification recommended |
| #1075 | Authors Widget | 35 | 170 | 19 | 1k+ | | | Output is not escaped |
| #1076 | Authors List | 87 | 2 | 16 | 5k+ | | | Nonce verification recommended |
| #1077 | Authorsy – Author Box, Multiple Authors, Guest Authors & Post Rating | 81 | 1 | 20 | 1k+ | | | Request data is not unslashed |
| #1078 | Multi Page Auto Advance for Gravity Forms | 24 | 653 | 1,335 | 2k+ | | | Non-prefixed global variable |
| #1079 | Auto Alt Text | 43 | 52 | 13 | 4k+ | | | Exception output is not escaped |
| #1080 | Auto Copyright Year Updater | 98 | 3 | 0 | 3k+ | | | Missing direct file access protection |
| #1081 | AADMY – Add Auto Date Month Year Into Posts | 73 | 30 | 32 | 400 | | | Non-prefixed function |
| #1082 | Auto Delete Applications – Add-on for WP Job Openings | 96 | 19 | 14 | 1k+ | | | Text Domain Mismatch |
| #1083 | Disable Gutenberg | 98 | 2 | 2 | 600 | | | trademarked term |
| #1084 | Auto Featured Image from Title | 72 | 24 | 4 | 1k+ | | | Setting is missing a sanitization callback |
| #1085 | Auto Hide Admin Bar | 99 | 2 | 0 | 4k+ | | | Missing direct file access protection |
| #1086 | Auto iFrame | 81 | 2 | 11 | 3k+ | | | Input is not sanitized |
| #1087 | Auto Image Alt Attribute | 55 | 26 | 7 | 6k+ | | | Unsafe printing function |
| #1088 | Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) | 41 | 175 | 26 | 100k+ | | | Unsafe printing function |
| #1089 | Auto Image Title & Alt | 68 | 13 | 4 | 400 | | | Missing direct file access protection |
| #1090 | Auto-Install Free SSL – Generate & Install Free SSL Certificates | 24 | 991 | 1,495 | 8k+ | | | Non-prefixed global variable |
| #1091 | Auto Login for Sakura Rental Server | 35 | 3 | 3 | 10k+ | | | Hidden files included |
| #1092 | Auto Ping Booster Free | 50 | 18 | 21 | 900 | | | Setting is missing a sanitization callback |
| #1093 | Auto Post Expiration | 81 | 12 | 4 | 800 | | | Text Domain Mismatch |
| #1094 | Auto Featured Image (Auto Post Thumbnail) | 79 | 5 | 30 | 50k+ | | | Non-prefixed hook name |
| #1095 | Auto Prune Posts | 38 | 54 | 57 | 1k+ | | | Output is not escaped |
| #1096 | Auto SEO | 98 | 3 | 12 | 500 | | | Non-prefixed global variable |
| #1097 | Enhanced Responsive Images | 99 | 1 | 2 | 50k+ | | | Missing direct file access protection |
| #1098 | Auto SRI | 92 | 4 | 1 | 500 | | | wp function not compatible with requires wp |
| #1099 | Auto Submenu | 98 | 2 | 2 | 2k+ | | | Missing direct file access protection |
| #1100 | Auto Subpage Menu | 85 | 5 | 6 | 800 | | | Database parameter is not escaped |