| #951 | Product Tabs Manager for WooCommerce | 24 | 634 | 482 | 2k+ | | | Text Domain Mismatch |
| #952 | WP-DownloadManager | 25 | 607 | 508 | 3k+ | | | Unsafe printing function |
| #953 | Seamless Donations is Sunset | 21 | 600 | 514 | 2k+ | | | Text Domain Mismatch |
| #954 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | 22 | 513 | 601 | 80k+ | | | Non-prefixed global variable |
| #955 | Cart Notices for WooCommerce | 23 | 639 | 474 | 2k+ | | | Text Domain Mismatch |
| #956 | AI WP Writer – SEO content generator, chatGPT, Gemini | 33 | 581 | 531 | 3k+ | | | Text Domain Mismatch |
| #957 | Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms | 24 | 563 | 548 | 4k+ | | | Text Domain Mismatch |
| #958 | Coupon Creator | 25 | 698 | 412 | 1k+ | | | Output is not escaped |
| #959 | Sales Report for WooCommerce | 24 | 659 | 451 | 1k+ | | | Output is not escaped |
| #960 | Slider Pro | 28 | 583 | 527 | 4k+ | | | Unsafe printing function |
| #961 | Arile Extra | 30 | 537 | 570 | 10k+ | | | Non-prefixed global variable |
| #962 | Leaky Paywall | 20 | 322 | 784 | 700 | | | Nonce verification recommended |
| #963 | Brevo – Email, SMS, Web Push, Chat, and more. | 20 | 460 | 646 | 100k+ | | | Request data is not unslashed |
| #964 | KiviCare – Clinic & Patient Management System (EHR) | 24 | 223 | 880 | 2k+ | | | Direct Query |
| #965 | Autopay | 28 | 769 | 334 | 3k+ | | | Text Domain Mismatch |
| #966 | Comet Cache | 21 | 857 | 245 | 20k+ | | | Output is not escaped |
| #967 | Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation | 25 | 789 | 313 | 30k+ | | | Text Domain Mismatch |
| #968 | Backup, Restore and Migrate your sites with XCloner | 25 | 238 | 864 | 10k+ | | | Input is not sanitized |
| #969 | Gabfire Widget Pack | 31 | 1,041 | 60 | 600 | | | Output is not escaped |
| #970 | TermsFeed AutoTerms: Privacy Policy Generator, Cookie Consent, GDPR, CCPA, Terms & Conditions, Disclaimers, Cookies Policy, EULA | 24 | 939 | 161 | 70k+ | | | Non Singular String Literal Domain |
| #971 | Custom Field Template | 29 | 568 | 530 | 30k+ | | | wp function not compatible with requires wp |
| #972 | Feed Them Social – Social Media Feeds, Video, and Photo Galleries | 23 | 563 | 535 | 20k+ | | | Output is not escaped |
| #973 | Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF | 20 | 557 | 541 | 100k+ | | | Output is not escaped |
| #974 | SEO Repair Kit – Meta Manager, Schema Manager, SEO Content Monitoring, GSC Integration, Keyword & Rank Tracking | 25 | 196 | 902 | 2k+ | | | Direct Query |
| #975 | Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid | 25 | 243 | 854 | 50k+ | | | Non-prefixed global variable |
| #976 | Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) | 25 | 40 | 1,057 | 1k+ | | | Non-prefixed global variable |
| #977 | SV Tracking Manager | 27 | 968 | 129 | 1k+ | | | Output is not escaped |
| #978 | SP Move Login | 26 | 881 | 215 | 6k+ | | | Text Domain Mismatch |
| #979 | User Submitted Posts – Enable Users to Submit Posts from the Front End | 26 | 699 | 396 | 10k+ | | | Text Domain Mismatch |
| #980 | WP Inventory Manager | 30 | 856 | 233 | 1k+ | | | Output is not escaped |
| #981 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | | | Exception output is not escaped |
| #982 | Cost Calculator Builder | 21 | 322 | 766 | 30k+ | | | Non-prefixed global variable |
| #983 | Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms | 27 | 720 | 367 | 5k+ | | | Text Domain Mismatch |
| #984 | UPC/EAN/GTIN Barcode Generator/Importer | 21 | 776 | 311 | 500 | | | Exception output is not escaped |
| #985 | GD Mail Queue | 24 | 502 | 582 | 700 | | | Output is not escaped |
| #986 | Mail Baby SMTP | 22 | 385 | 699 | 600 | | | SQL query is not prepared |
| #987 | RSFirewall! | 24 | 563 | 521 | 4k+ | | | Output is not escaped |
| #988 | Jetpack Social | 48 | 829 | 254 | 30k+ | | | Text Domain Mismatch |
| #989 | MyWorks Sync for WooCommerce & Xero | 29 | 1 | 1,080 | 800 | | | Non-prefixed global variable |
| #990 | WP Custom Cursors | WordPress Cursor Plugin | 36 | 691 | 390 | 9k+ | | | Text Domain Mismatch |
| #991 | DK PDF – WordPress PDF Generator | 23 | 744 | 335 | 3k+ | | | Exception output is not escaped |
| #992 | Ultimate Product Catalog | 24 | 554 | 525 | 5k+ | | | Unsafe printing function |
| #993 | Product Table for WooCommerce | 25 | 183 | 896 | 5k+ | | | Non-prefixed global variable |
| #994 | Business Essentials for Contact Form 7 | 24 | 674 | 403 | 8k+ | | | Text Domain Mismatch |
| #995 | Sellsy | 22 | 586 | 490 | 400 | | | Non Singular String Literal Domain |
| #996 | Zibal Payment Gateway for Gravity Forms | 27 | 828 | 248 | 400 | | | Text Domain Mismatch |
| #997 | Blocksy Companion | 81 | | 1,075 | 300k+ | | | Non-prefixed global variable |
| #998 | Maspik – Ultimate Spam Protection | 28 | 212 | 862 | 30k+ | | | Missing nonce verification |
| #999 | FV Simpler SEO | 24 | 766 | 308 | 2k+ | | | Text Domain Mismatch |
| #1000 | WP Zoho for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms – CRM, Bigin | 27 | 692 | 381 | 3k+ | | | Text Domain Mismatch |