| #1001 | Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin | 25 | 119 | 2,704 | 2k+ | | | Non-prefixed global variable |
| #1002 | Order On Mobile for WooCommerce | 61 | 37 | 15 | 2k+ | | | Text Domain Mismatch |
| #1003 | Notifima – WooCommerce Stock Manager, Inventory Management, Waitlist | 79 | 121 | 42 | 3k+ | | | Text Domain Mismatch |
| #1004 | Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin | 38 | 2 | 457 | 3k+ | | | Input is not sanitized |
| #1005 | PostNL for WooCommerce | 34 | 597 | 104 | 3k+ | | | Text Domain Mismatch |
| #1006 | ThemeHunk Customizer | 23 | 3,968 | 582 | 6k+ | | | Text Domain Mismatch |
| #1007 | WP Offload SES Lite | 96 | 541 | 5 | 10k+ | | | Text Domain Mismatch |
| #1008 | WooCommerce PayPal Payments | 37 | 194 | 110 | 800k+ | | | Exception output is not escaped |
| #1009 | Smart Slider 3 | 23 | 261 | 268 | 800k+ | | | Non-prefixed global variable |
| #1010 | Kubio AI Page Builder | 60 | 283 | 77 | 90k+ | | | Missing direct file access protection |
| #1011 | Order Approval for Woocommerce | 81 | 3 | 208 | 1k+ | | | Non-prefixed global variable |
| #1012 | Tutor LMS Divi Modules | 30 | 420 | 722 | 1k+ | | | Non-prefixed global variable |
| #1013 | Eurobank WooCommerce Payment Gateway | 40 | 66 | 43 | 2k+ | | | Non Singular String Literal Domain |
| #1014 | Pay in Store WooCommerce Payment Gateway | 87 | 26 | 5 | 2k+ | | | Non Singular String Literal Domain |
| #1015 | Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management | 33 | | 538 | 3k+ | | | Direct Query |
| #1016 | Shortcodes Finder | 100 | | 1 | 4k+ | | | Non-prefixed class |
| #1017 | FV Flowplayer Video Player | 23 | 1,311 | 1,454 | 20k+ | | | Output is not escaped |
| #1018 | Checkout Field Editor for WooCommerce – Checkout Manager | 34 | 122 | 64 | 20k+ | | | Text Domain Mismatch |
| #1019 | Payment Gateway Based Fees and Discounts for WooCommerce | 35 | 24 | 68 | 30k+ | | | Non-prefixed hook name |
| #1020 | Tutor LMS Elementor Addons | 31 | 227 | 453 | 30k+ | | | Non-prefixed global variable |
| #1021 | GEO Plugin by Squirrly SEO | 24 | 1,195 | 224 | 30k+ | | | Missing Translators Comment |
| #1022 | WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content | 24 | 1,777 | 394 | 40k+ | | | Text Domain Mismatch |
| #1023 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | 24 | 2,581 | 2,109 | 100k+ | | | Output is not escaped |
| #1024 | Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | 24 | 167 | 225 | 300k+ | | | Nonce verification recommended |
| #1025 | Skroutz & Bestprice XML feed for WooCommerce | 39 | 135 | 3 | 1k+ | | | Output is not escaped |
| #1026 | Viva Payments – Viva Wallet WooCommerce Payment Gateway | 36 | 97 | 32 | 1k+ | | | Non Singular String Literal Domain |
| #1027 | Team Section Block – Showcase Team Members with Layout Options | 83 | 1 | 21 | 1k+ | | | Non-prefixed namespace |
| #1028 | Photo Gallery by Ays – Responsive Image Gallery | 25 | 466 | 820 | 1k+ | | | Output is not escaped |
| #1029 | Chartify – WordPress Chart Plugin | 33 | 76 | 411 | 3k+ | | | Non-prefixed global variable |
| #1030 | PublishPress Blocks – Block Controls, Block Visibility, Block Permissions | 30 | 239 | 417 | 20k+ | | | Non-prefixed global variable |
| #1031 | Secure Copy Content Protection and Content Locking | 25 | 958 | 799 | 20k+ | | | Output is not escaped |
| #1032 | Phoenix Media Rename | 37 | 180 | 104 | 50k+ | | | Output is not escaped |
| #1033 | GHL Contact Form 7 Bridge – Send Contact Form 7 leads to GHL CRM | 94 | 6 | 17 | 400 | | | Non-prefixed global variable |
| #1034 | wallee | 24 | 331 | 220 | 400 | | | Exception output is not escaped |
| #1035 | BjornTech PayPal POS integration for WooCommerce | 34 | 68 | 182 | 700 | | | Non-prefixed hook name |
| #1036 | CHP Ads Block Detector | 35 | 108 | 35 | 900 | | | Output is not escaped |
| #1037 | WowRevenue – Product Bundles & Bulk Discounts | 32 | 13 | 2,027 | 1k+ | | | Non-prefixed global variable |
| #1038 | AI WP Writer – SEO content generator, chatGPT, Gemini | 33 | 581 | 531 | 3k+ | | | Text Domain Mismatch |
| #1039 | WowStore – Store Builder & Product Blocks for WooCommerce | 36 | 56 | 437 | 4k+ | | | Non-prefixed global variable |
| #1040 | Flat Rate Shipping Method for WooCommerce | 25 | 1,242 | 1,778 | 5k+ | | | Non-prefixed global variable |
| #1041 | Mang Board WP | 24 | 1,213 | 4,720 | 9k+ | | | Non-prefixed global variable |
| #1042 | Cookie Consent – GDPR & CCPA Cookie Banner & Consent Manager | 92 | | 16 | 20k+ | | | Direct Query |
| #1043 | Visitor Traffic Real Time Statistics | 24 | 472 | 927 | 30k+ | | | Non-prefixed global variable |
| #1044 | Post Grid Gutenberg Blocks – PostX | 29 | 118 | 404 | 40k+ | | | Non-prefixed global variable |
| #1045 | Booking for Appointments and Events Calendar – Amelia | 25 | 1,487 | 480 | 90k+ | | | Exception output is not escaped |
| #1046 | WP 2FA – Two-factor authentication for WordPress | 25 | 283 | 716 | 100k+ | | | Non-prefixed global variable |
| #1047 | Web Accessibility (formally known as Ally) – WCAG Scanning, Guided Fixes, Usability Widget | 41 | 47 | 38 | 500k+ | | | Output is not escaped |
| #1048 | Air WP Sync – Airtable to WordPress | 35 | 37 | 45 | 1k+ | | | Non-prefixed hook name |
| #1049 | La Poste Pro Expéditions WooCommerce | 86 | 3 | 95 | 1k+ | | | Non-prefixed global variable |
| #1050 | easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution | 28 | 405 | 924 | 4k+ | | | Missing nonce verification |