| #1101 | Xpro Addons — 140+ Widgets for Elementor | 29 | 27 | 826 | 30k+ | | | Non-prefixed global variable |
| #1102 | YITH WooCommerce Ajax Search | 22 | 408 | 1,659 | 30k+ | | | Non-prefixed global variable |
| #1103 | Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation | 24 | 1,211 | 3,152 | 30k+ | | | Non-prefixed global variable |
| #1104 | AccessiYes Accessibility Widget for ADA, EAA & WCAG Readiness | 100 | | 2 | 20k+ | | | trademarked term |
| #1105 | AccessibleWP – Accessibility Toolbar | 38 | 381 | 26 | 20k+ | | | Text Domain Mismatch |
| #1106 | Accordions | 55 | 1 | 101 | 20k+ | | | slow db query meta query |
| #1107 | Advanced Custom Fields: Image Aspect Ratio Crop Field | 35 | 70 | 37 | 20k+ | | | Text Domain Mismatch |
| #1108 | Action Scheduler | 38 | 92 | 134 | 20k+ | | | Exception output is not escaped |
| #1109 | Add Category to Pages | 97 | 3 | 2 | 20k+ | | | Missing direct file access protection |
| #1110 | AddFunc Head & Footer Code | 43 | 28 | 18 | 20k+ | | | Output is not escaped |
| #1111 | Admin Custom Login | 43 | | 238 | 20k+ | | | Request data is not unslashed |
| #1112 | AdRotate Banner Manager | 25 | 1,363 | 846 | 20k+ | | | Unsafe printing function |
| #1113 | Advanced Coupons for WooCommerce Coupons & Store Credit | 33 | 84 | 215 | 20k+ | | | Non-prefixed global variable |
| #1114 | Advanced Dynamic Pricing and Discount Rules for WooCommerce | 44 | 2 | 813 | 20k+ | | | Non-prefixed namespace |
| #1115 | PublishPress Blocks – Block Controls, Block Visibility, Block Permissions | 30 | 239 | 417 | 20k+ | | | Non-prefixed global variable |
| #1116 | Advanced Product Labels for WooCommerce | 23 | 921 | 559 | 20k+ | | | Text Domain Mismatch |
| #1117 | Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … | 93 | 25 | 32 | 20k+ | | | Missing direct file access protection |
| #1118 | Advanced WordPress Reset – Debug, Recover & Reset WP | 25 | 475 | 464 | 20k+ | | | Output is not escaped |
| #1119 | AGCA – Custom Dashboard & Login Page | 34 | 350 | 44 | 20k+ | | | Unsafe printing function |
| #1120 | All-in-One Video Gallery | 22 | 911 | 2,892 | 20k+ | | | Non-prefixed global variable |
| #1121 | Alt Text AI – Automatically generate image alt text for SEO and accessibility | 29 | 72 | 280 | 20k+ | | | Non-prefixed global variable |
| #1122 | Animate It! | 39 | 137 | 16 | 20k+ | | | Text Domain Mismatch |
| #1123 | AnWP Post Grid and Post Carousel Slider for Elementor | 48 | 758 | 171 | 20k+ | | | Text Domain Mismatch |
| #1124 | Any Mobile Theme Switcher | 38 | 69 | 59 | 20k+ | | | Output is not escaped |
| #1125 | Apollo13 Framework Extensions | 27 | 171 | 273 | 20k+ | | | Non-prefixed global variable |
| #1126 | Asesor de Cookies RGPD para normativa europea | 36 | 94 | 91 | 20k+ | | | wp function not compatible with requires wp |
| #1127 | Astra Hooks | 96 | 9 | 0 | 20k+ | | | Missing direct file access protection |
| #1128 | Attachment Pages Redirect | 99 | 1 | 0 | 20k+ | | | outdated tested upto header |
| #1129 | Aurora Heatmap | 35 | 14 | 18 | 20k+ | | | Non-prefixed global variable |
| #1130 | Auto Upload Images | 40 | 62 | 13 | 20k+ | | | Unsafe printing function |
| #1131 | Advanced Automatic Updates | 49 | 26 | 25 | 20k+ | | | Nonce verification recommended |
| #1132 | Automattic For Agencies Client | 53 | 249 | 184 | 20k+ | | | Text Domain Mismatch |
| #1133 | Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro | 45 | 26 | 117 | 20k+ | | | Non-prefixed hook name |
| #1134 | Basic User Avatars | 58 | 17 | 7 | 20k+ | | | Output is not escaped |
| #1135 | Beehive Analytics – Google Analytics Dashboard | 90 | 611 | 22 | 20k+ | | | Text Domain Mismatch |
| #1136 | BetterLinks – URL Shortener, Link Tracking, Analytics & Affiliate Link Manager | 99 | 4 | 2 | 20k+ | | | wp function not compatible with requires wp |
| #1137 | Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation | 100 | | 2 | 20k+ | | | Non-prefixed global symbol |
| #1138 | Gutenberg Block Editor Toolkit – EditorsKit | 35 | 61 | 25 | 20k+ | | | Text Domain Mismatch |
| #1139 | BlossomThemes Email Newsletter | 23 | 337 | 239 | 20k+ | | | Output is not escaped |
| #1140 | Bosa Elementor Addons and Templates for WooCommerce | 32 | 40 | 165 | 20k+ | | | slow db query tax query |
| #1141 | Boxzilla – WordPress Popup Builder | 79 | 4 | 64 | 20k+ | | | Non-prefixed global variable |
| #1142 | Branda – White Label & Branding, Free Login Page Customizer | 24 | 3,174 | 820 | 20k+ | | | Text Domain Mismatch |
| #1143 | Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content | 24 | 237 | 291 | 20k+ | | | error log print r |
| #1144 | BulletProof Security | 0 | 5,048 | 4,949 | 20k+ | | | Output is not escaped |
| #1145 | Cloudways WordPress Migrator | 82 | 6 | 9 | 20k+ | | | Database parameter is not escaped |
| #1146 | Catch IDs | 88 | | 16 | 20k+ | | | Non-prefixed global variable |
| #1147 | Change Mail Sender | 76 | 97 | 19 | 20k+ | | | Text Domain Mismatch |
| #1148 | Contact Form 7 – Phone mask field | 60 | 21 | 7 | 20k+ | | | Unsafe printing function |
| #1149 | CF7 Mate – AI Form Builder, Styler & Multi-Step Forms for Contact Form 7 | 93 | 3 | 9 | 20k+ | | | Non-prefixed class |
| #1150 | Change WordPress Login Logo | 83 | 5 | 9 | 20k+ | | | Non-prefixed function |