| #951 | SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator | 29 | 336 | 198 | 500k+ | | | Text Domain Mismatch |
| #952 | Imagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF | 21 | 426 | 862 | 1m+ | | | Non-prefixed global variable |
| #953 | Sticky Content – Make Any Section Sticky on Scroll | 82 | 24 | 9 | 400 | | | Text Domain Mismatch |
| #954 | Panorama Block – Display 360-Degree Panoramic Views | 100 | | 0 | 700 | | | No open findings |
| #955 | Click To Copy – Copy Text or Code to Clipboard Instantly | 79 | 9 | 8 | 900 | | | Text Domain Mismatch |
| #956 | Premium Packages – Sell Digital Products Securely | 20 | 2,032 | 2,232 | 2k+ | | | Non-prefixed global variable |
| #957 | Japanized for WooCommerce | 35 | 6 | 68 | 10k+ | | | Non-prefixed class |
| #958 | Form Input Masks For Elementor Forms | 35 | 3 | 1 | 10k+ | | | Hidden files included |
| #959 | Conditional Fields for Elementor Form – Apply Conditional Logic | 94 | | 7 | 10k+ | | | Missing nonce verification |
| #960 | Country Code For Elementor Form Telephone Field | 99 | 10 | 3 | 10k+ | | | Text Domain Mismatch |
| #961 | Input Mask For Elementor Form Fields | 100 | | 1 | 20k+ | | | Non-prefixed class |
| #962 | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 24 | 2,012 | 5,689 | 20k+ | | | Non-prefixed global variable |
| #963 | Cool FormKit Lite – Advanced Form Builder for Elementor | 94 | 5 | 24 | 20k+ | | | Non-prefixed constant |
| #964 | Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce | 80 | 9 | 450 | 80k+ | | | Non-prefixed hook name |
| #965 | TablePress – Tables in WordPress made easy | 25 | 847 | 2,174 | 600k+ | | | Non-prefixed global variable |
| #966 | Bayarcash WooCommerce | 34 | 148 | 138 | 700 | | | Non Singular String Literal Domain |
| #967 | Liza Widget For Spotify and Elementor | 27 | 609 | 1,287 | 1k+ | | | Non-prefixed global variable |
| #968 | Info Cards – Add Text and Media in Card Layouts | 81 | 7 | 25 | 2k+ | | | Non-prefixed namespace |
| #969 | Timeline Module for Divi | 84 | 16 | 11 | 3k+ | | | Text Domain Mismatch |
| #970 | Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets | 24 | 969 | 2,140 | 7k+ | | | Non-prefixed global variable |
| #971 | RTMKit | 33 | 11 | 388 | 50k+ | | | Non-prefixed global variable |
| #972 | Wallet for WooCommerce | 40 | 32 | 524 | 20k+ | | | Non-prefixed hook name |
| #973 | VenoMaps – OpenStreetMap & Privacy-Friendly Geo Maps | 86 | 20 | 6 | 400 | | | wp function not compatible with requires wp |
| #974 | Real 3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder | 23 | 908 | 1,377 | 10k+ | | | Non-prefixed global variable |
| #975 | SuperFaktura WooCommerce | 36 | 60 | 116 | 2k+ | | | Nonce verification recommended |
| #976 | MoreConvert Wishlist for WooCommerce | 24 | 3,681 | 629 | 9k+ | | | Text Domain Mismatch |
| #977 | AI Product Tools – Bulk Product Content Generator & AI Toolkit for WooCommerce | 30 | 508 | 562 | 400 | | | SQL query is not prepared |
| #978 | Sola Payment Gateway for WooCommerce | 35 | 107 | 116 | 700 | | | Missing Translators Comment |
| #979 | BNE Testimonials | 29 | 521 | 102 | 1k+ | | | Output is not escaped |
| #980 | Raptive Ads | 67 | 34 | 31 | 6k+ | | | Text Domain Mismatch |
| #981 | NewStatPress | 94 | 95 | 12 | 8k+ | | | wp function not compatible with requires wp |
| #982 | WooCommerce | 22 | 1,359 | 6,172 | 7m+ | | | Non-prefixed global variable |
| #983 | Atarim – Visual Feedback, Review & AI Collaboration | 24 | 765 | 442 | 1k+ | | | wp function not compatible with requires wp |
| #984 | Ninjalytics: Sales Reports & Order Export for WooCommerce and EDD | 35 | 6 | 32 | 6k+ | | | Non-prefixed global variable |
| #985 | Termageddon: Cookie Consent & Privacy Compliance | 35 | 27 | 13 | 7k+ | | | Exception output is not escaped |
| #986 | Xpro Addons — 140+ Widgets for Elementor | 29 | 27 | 826 | 30k+ | | | Non-prefixed global variable |
| #987 | BuddyPress | 23 | 584 | 9,012 | 100k+ | | | Non-prefixed function |
| #988 | Sucuri Security – Auditing, Malware Scanner and Security Hardening | 82 | 51 | 11 | 600k+ | | | Missing direct file access protection |
| #989 | Envíos Coordinadora Woocommerce (Oficial) – WordPress plugin | 85 | 11 | 11 | 500 | | | Missing Arg Domain |
| #990 | Tourfic Toolkit | 37 | 67 | 165 | 1k+ | | | Post Not In exclude |
| #991 | Registrations for the Events Calendar – Event Registration Plugin | 24 | 404 | 944 | 7k+ | | | Non-prefixed global variable |
| #992 | WP Job Portal – AI-Powered Recruitment System for Company or Job Board website | 24 | 78 | 1,158 | 8k+ | | | Missing Version |
| #993 | MainWP Dashboard: Self-hosted WordPress Management for Agencies | 31 | 95 | 317 | 20k+ | | | Interpolated SQL is not prepared |
| #994 | Headers Security Advanced & HSTS WP | 76 | 19 | 10 | 90k+ | | | Missing Translators Comment |
| #995 | MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites | 38 | 3 | 136 | 700k+ | | | Non-prefixed hook name |
| #996 | WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance | 56 | 5 | 774 | 1m+ | | | Non-prefixed global variable |
| #997 | myCred Addons – Ultimate myCred Modules To Support WordPress Gamification and Loyalty Rewards | 22 | 2,344 | 1,320 | 400 | | | Output is not escaped |
| #998 | Worldline Global Online Pay for WooCommerce | 31 | 160 | 86 | 500 | | | Missing direct file access protection |
| #999 | UniConsent Cookie Consent CMP – Consent Manager | 42 | 148 | 18 | 1k+ | | | Unsafe printing function |
| #1000 | Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin | 25 | 119 | 2,704 | 2k+ | | | Non-prefixed global variable |