| #901 | YITH WooCommerce Wishlist | 24 | 448 | 1,486 | 400k+ | | | Non-prefixed global variable |
| #902 | YITH WooCommerce Product Gallery & Image Zoom | 24 | 418 | 1,490 | 20k+ | | | Non-prefixed global variable |
| #903 | YMC Filter | 24 | 12 | 1,729 | 4k+ | | | Non-prefixed global variable |
| #904 | Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation | 24 | 1,211 | 3,152 | 30k+ | | | Non-prefixed global variable |
| #905 | 3DPrint Lite | 25 | 175 | 1,029 | 700 | | | Non-prefixed global variable |
| #906 | Dynamic Pricing With Discount Rules for WooCommerce | 25 | 165 | 205 | 5k+ | | | Non-prefixed global variable |
| #907 | Adminify – White Label, Admin Menu Editor, Login Customizer | 25 | 546 | 1,379 | 7k+ | | | Non-prefixed global variable |
| #908 | AdRotate Banner Manager | 25 | 1,363 | 846 | 20k+ | | | Unsafe printing function |
| #909 | Advanced Floating Content Lite | 25 | 643 | 1,348 | 7k+ | | | Non-prefixed global variable |
| #910 | Advanced WordPress Reset – Debug, Recover & Reset WP | 25 | 475 | 464 | 20k+ | | | Output is not escaped |
| #911 | AF Companion – Starter Sites, Speed Booster & Growth Suite for Professional Publishing | 25 | 665 | 1,486 | 10k+ | | | Non-prefixed global variable |
| #912 | Affiliates | 25 | 689 | 1,483 | 2k+ | | | Output is not escaped |
| #913 | FiboSearch – Ajax Search for WooCommerce | 25 | 603 | 302 | 100k+ | | | Output is not escaped |
| #914 | AliExpress Dropshipping Plugin for WooCommerce Stores | 25 | 555 | 734 | 4k+ | | | Text Domain Mismatch |
| #915 | All 404 Redirect to Homepage | 25 | 140 | 301 | 200k+ | | | date date |
| #916 | AIO Forms – Craft Complex Forms Easily | 25 | 189 | 418 | 700 | | | Mixed line endings |
| #917 | Booking for Appointments and Events Calendar – Amelia | 25 | 1,487 | 480 | 90k+ | | | Exception output is not escaped |
| #918 | Animated Number Counters | 25 | 463 | 1,932 | 2k+ | | | Non-prefixed global variable |
| #919 | Appointment Booking Calendar | 25 | 327 | 1,055 | 1k+ | | | Non-prefixed global variable |
| #920 | Appointment Hour Booking – Booking Calendar | 25 | 262 | 1,253 | 10k+ | | | Non-prefixed global variable |
| #921 | ATUM WooCommerce Inventory Management and Stock Tracking | 25 | 2,634 | 1,306 | 10k+ | | | Non Singular String Literal Domain |
| #922 | bbp style pack | 25 | 1,419 | 1,791 | 6k+ | | | Output is not escaped |
| #923 | Beaver Builder Page Builder – Drag and Drop Website Builder | 25 | 4,463 | 1,819 | 100k+ | | | Text Domain Mismatch |
| #924 | BlockSpare – Gutenberg Post Grid Blocks for News, Magazine & Blog Websites | 25 | 1,327 | 1,714 | 10k+ | | | Non-prefixed global variable |
| #925 | Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid | 25 | 243 | 854 | 50k+ | | | Non-prefixed global variable |
| #926 | Booking Activities | 25 | 1,036 | 1,469 | 3k+ | | | Output is not escaped |
| #927 | Booking Calendar Contact Form | 25 | 371 | 884 | 500 | | | Input is not validated |
| #928 | Booking Package | 25 | 1,697 | 3,977 | 10k+ | | | Missing nonce verification |
| #929 | Bookit — Booking & Appointment Calendar | 25 | 565 | 1,458 | 4k+ | | | Non-prefixed global variable |
| #930 | Online Scheduling and Appointment Booking System – Bookly | 25 | 1,088 | 888 | 60k+ | | | SQL query is not prepared |
| #931 | Breeze Cache | 25 | 218 | 800 | 400k+ | | | Non-prefixed global variable |
| #932 | Broken Link Checker | 25 | 727 | 600 | 500k+ | | | Output is not escaped |
| #933 | BuddyPress Docs | 25 | 284 | 421 | 7k+ | | | Nonce verification recommended |
| #934 | Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor | 25 | 1,041 | 1,016 | 4k+ | | | Text Domain Mismatch |
| #935 | Bulk Edit and Create User Profiles – WP Sheet Editor | 25 | 995 | 1,001 | 1k+ | | | Text Domain Mismatch |
| #936 | PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus | 25 | 362 | 1,586 | 100k+ | | | Non-prefixed global variable |
| #937 | SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce) | 25 | 235 | 214 | 10k+ | | | Database parameter is not escaped |
| #938 | GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time | 25 | 614 | 1,431 | 40k+ | | | Non-prefixed global variable |
| #939 | CheckoutWC Lite – Conversion optimized WooCommerce checkout | 25 | 1,416 | 854 | 3k+ | | | Text Domain Mismatch |
| #940 | CheckView – Form & Checkout Testing | 25 | 66 | 337 | 1k+ | | | Direct Query |
| #941 | HIPAA FORMS | 25 | 414 | 416 | 800 | | | Request data is not unslashed |
| #942 | Admin Columns | 25 | 613 | 995 | 100k+ | | | Non-prefixed namespace |
| #943 | Colissimo shipping methods for WooCommerce | 25 | 1,755 | 557 | 10k+ | | | Text Domain Mismatch |
| #944 | Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode | 25 | 99 | 1,040 | 700k+ | | | Non-prefixed global variable |
| #945 | Disable Comments & Delete All Comments | 25 | 503 | 185 | 9k+ | | | Output is not escaped |
| #946 | Coinbase Business Gateway for WooCommerce | 25 | 569 | 1,317 | 800 | | | Non-prefixed global variable |
| #947 | Conditional Payment Methods for WooCommerce | 25 | 548 | 1,398 | 1k+ | | | Non-prefixed global variable |
| #948 | Contact Form DB Divi | 25 | 533 | 1,299 | 3k+ | | | Non-prefixed global variable |
| #949 | Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress | 25 | 498 | 355 | 1k+ | | | Text Domain Mismatch |
| #950 | Contact Form Email | 25 | 409 | 898 | 9k+ | | | Non-prefixed global variable |