| #1001 | Login as User | 36 | 101 | 64 | 30k+ | | | Output is not escaped |
| #1002 | Custom Login Page Customizer – Login Designer | 22 | 588 | 1,455 | 30k+ | | | Non-prefixed global variable |
| #1003 | MapPress Maps for WordPress | 32 | 695 | 133 | 30k+ | | | Missing Arg Domain |
| #1004 | Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits | 23 | 525 | 1,541 | 30k+ | | | Non-prefixed global variable |
| #1005 | Missed Scheduled Posts Publisher by WPBeginner | 63 | 16 | 17 | 30k+ | | | Text Domain Mismatch |
| #1006 | Timetable and Event Schedule by MotoPress | 24 | 456 | 232 | 30k+ | | | Output is not escaped |
| #1007 | My-Plugins | 72 | 24 | 6 | 30k+ | | | Missing Arg Domain |
| #1008 | Nimble Page Builder | 20 | 1,591 | 1,684 | 30k+ | | | Missing Arg Domain |
| #1009 | NinjaScanner – Virus & Malware scan | 22 | 596 | 551 | 30k+ | | | Non-prefixed global variable |
| #1010 | OG — Better Share on Social Media | 81 | 14 | 51 | 30k+ | | | Non-prefixed hook name |
| #1011 | External Links in New Window / New Tab | 98 | 2 | 13 | 30k+ | | | Non-prefixed global variable |
| #1012 | Optimus – WordPress Image Optimizer | 41 | 52 | 20 | 30k+ | | | Unsafe printing function |
| #1013 | Page-list | 97 | 5 | 23 | 30k+ | | | Post Not In exclude |
| #1014 | PPWP – Password Protect Pages | 98 | | 29 | 30k+ | | | Non-prefixed class |
| #1015 | Piotnet Addons For Elementor | 88 | 744 | 26 | 30k+ | | | Text Domain Mismatch |
| #1016 | Contact Form & SMTP Plugin for WordPress by PirateForms | 93 | 14 | 102 | 30k+ | | | Non-prefixed hook name |
| #1017 | Post Grid | 44 | 33 | 208 | 30k+ | | | Non-prefixed global variable |
| #1018 | افزونه رسمی ترب | 36 | 42 | 86 | 30k+ | | | Exception output is not escaped |
| #1019 | Protect Uploads | 99 | 2 | 1 | 30k+ | | | Missing direct file access protection |
| #1020 | QODE Optimizer | 74 | 1 | 249 | 30k+ | | | Non-prefixed global variable |
| #1021 | Reading Time WP | 89 | 5 | 33 | 30k+ | | | Non-prefixed global variable |
| #1022 | reCAPTCHA for MW WP Form | 43 | 37 | 14 | 30k+ | | | Non Singular String Literal Domain |
| #1023 | Remove Dashboard Access | 35 | 16 | 23 | 30k+ | | | wp function not compatible with requires wp |
| #1024 | Astra Customizer Reset | 97 | 7 | 1 | 30k+ | | | Text Domain Mismatch |
| #1025 | Accordion FAQ – Compatible With All Page Builder (Elementor, Gutenberg) | 31 | 460 | 201 | 30k+ | | | Non Singular String Literal Domain |
| #1026 | RTMForm Builder | 34 | 188 | 209 | 30k+ | | | Text Domain Mismatch |
| #1027 | RSS Importer | 70 | 14 | 2 | 30k+ | | | Output is not escaped |
| #1028 | Scripts n Styles | 39 | 150 | 92 | 30k+ | | | Output is not escaped |
| #1029 | Security Plugin, Firewall & Malware Scanner with Auto Removal | 24 | 1,188 | 770 | 30k+ | | | Output is not escaped |
| #1030 | Self-Hosted Google Fonts | 77 | 35 | 11 | 30k+ | | | Text Domain Mismatch |
| #1031 | SEOWriting | 52 | 10 | 24 | 30k+ | | | Output is not escaped |
| #1032 | Seriously Simple Podcasting | 23 | 548 | 629 | 30k+ | | | Non-prefixed hook name |
| #1033 | Server IP & Memory Usage Display | 89 | 3 | 5 | 30k+ | | | Input is not sanitized |
| #1034 | Shariff Wrapper | 32 | 33 | 404 | 30k+ | | | Non-prefixed global variable |
| #1035 | Simply Static – The Static Site Generator | 25 | 187 | 528 | 30k+ | | | Non-prefixed hook name |
| #1036 | SimplyBook.me – Booking and reservations calendar | 54 | 31 | 13 | 30k+ | | | Exception output is not escaped |
| #1037 | Site Offline Or Coming Soon Or Maintenance Mode | 37 | 127 | 138 | 30k+ | | | Unsafe printing function |
| #1038 | SMTP2GO for WordPress – Email Made Easy | 33 | 186 | 111 | 30k+ | | | Output is not escaped |
| #1039 | Snazzy Maps | 43 | 9 | 62 | 30k+ | | | Request data is not unslashed |
| #1040 | Snow Monkey Blocks | 92 | 87 | 173 | 30k+ | | | Non-prefixed global variable |
| #1041 | Snow Monkey Editor | 99 | 2 | 3 | 30k+ | | | Non-prefixed global variable |
| #1042 | Snow Monkey Forms | 91 | 36 | 41 | 30k+ | | | Non-prefixed global variable |
| #1043 | Social Media Widget | 53 | 90 | 21 | 30k+ | | | Text Domain Mismatch |
| #1044 | Hubbub Lite – Fast, free social sharing and follow buttons | 27 | 337 | 172 | 30k+ | | | Text Domain Mismatch |
| #1045 | SocialFeeds | 90 | | 10 | 30k+ | | | Nonce verification recommended |
| #1046 | Slider by Soliloquy – Responsive Image Slider for WordPress | 90 | 470 | 29 | 30k+ | | | Text Domain Mismatch |
| #1047 | SpinupWP | 49 | 43 | 38 | 30k+ | | | Non-prefixed function |
| #1048 | GEO Plugin by Squirrly SEO | 24 | 1,195 | 224 | 30k+ | | | Missing Translators Comment |
| #1049 | Stop Spammers Classic | 94 | 185 | 1 | 30k+ | | | wp function not compatible with requires wp |
| #1050 | Stripe Tax – Sales tax automation for WooCommerce | 36 | 97 | 61 | 30k+ | | | Exception output is not escaped |