| #7151 | Gutenberg Block Editor Toolkit – EditorsKit | 35 | 61 | 25 | 20k+ | | | Text Domain Mismatch |
| #7152 | Block User Account | 35 | 280 | 143 | 1k+ | | | Unsafe printing function |
| #7153 | BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library | 35 | 56 | 16 | 10k+ | | | block api version too low |
| #7154 | Blocks for Eventbrite | 35 | 3 | 4 | 1k+ | | | Hidden files included |
| #7155 | Blogsqode – Blog Layouts and News Post Design | 35 | 430 | 63 | 400 | | | Text Domain Mismatch |
| #7156 | BlossomThemes Toolkit | 35 | 347 | 52 | 30k+ | | | Output is not escaped |
| #7157 | Bluehost Site Migrator | 35 | 11 | 18 | 4k+ | | | Missing direct file access protection |
| #7158 | Tooltipy (tooltips for WP) | 35 | 370 | 125 | 1k+ | | | Text Domain Mismatch |
| #7159 | bookingflow Smoobu for WP | 35 | 107 | 12 | 400 | | | Text Domain Mismatch |
| #7160 | Bootstrap for Contact Form 7 | 35 | 35 | 73 | 10k+ | | | Nonce verification recommended |
| #7161 | BORICA Payments by BORICA AD | 35 | 537 | 196 | 500 | | | Text Domain Mismatch |
| #7162 | BotWriter – AI Writer & SEO Content Generator | 35 | 16 | 504 | 3k+ | | | Direct Query |
| #7163 | BuddyPress Activity Filter | 35 | 25 | 66 | 400 | | | Nonce verification recommended |
| #7164 | Wbcom Designs – BuddyPress Activity Social Share | 35 | 293 | 27 | 400 | | | Text Domain Mismatch |
| #7165 | Custom Order Status Manager for WooCommerce | 35 | 630 | 67 | 30k+ | | | Text Domain Mismatch |
| #7166 | Registration Options for BuddyPress | 35 | 47 | 132 | 1k+ | | | Non-prefixed function |
| #7167 | Brightcove Video Connect | 35 | 580 | 235 | 600 | | | Text Domain Mismatch |
| #7168 | Brozzme DB Prefix & Tools Addons | 35 | 24 | 42 | 10k+ | | | Request data is not unslashed |
| #7169 | BSK Forms Blacklist | 35 | 831 | 550 | 1k+ | | | Output is not escaped |
| #7170 | BTCPay Server – Accept Bitcoin payments in WooCommerce | 35 | 48 | 86 | 1k+ | | | Missing nonce verification |
| #7171 | BugHerd | 35 | 8 | 2 | 3k+ | | | Output is not escaped |
| #7172 | Bulk Download for Gravity Forms | 35 | 5 | 2 | 500 | | | Hidden files included |
| #7173 | Bulk Page Stub Creator | 35 | 4 | 2 | 500 | | | Non-prefixed constant |
| #7174 | Business Hours Indicator | 35 | 139 | 106 | 8k+ | | | Alternative PHP tag found |
| #7175 | Buying Buddy IDX CRM – Real Estate MLS Plugin | 35 | 71 | 240 | 500 | | | Request data is not unslashed |
| #7176 | C3 Cloudfront Cache Controller | 35 | 109 | 60 | 3k+ | | | Non Singular String Literal Domain |
| #7177 | Cache Enabler | 35 | 44 | 75 | 90k+ | | | Input is not sanitized |
| #7178 | UseStrict's Calendly Embedder | 35 | 4 | 1 | 2k+ | | | Hidden files included |
| #7179 | Divi Carousel Lite – Responsive Carousel & Slider Modules for Divi Builder | 35 | 381 | 7 | 6k+ | | | Text Domain Mismatch |
| #7180 | CatFolders – WordPress Media Library Folders & Categories | 35 | 35 | 76 | 6k+ | | | Direct Query |
| #7181 | Central Connect | 35 | 7 | 21 | 400 | | | Nonce verification recommended |
| #7182 | CF7 Spreadsheets | 35 | 100 | 62 | 400 | | | Text Domain Mismatch |
| #7183 | CF7 Submissions – Securely Store Contact Form 7 Data and Attachments, Reply to the Sender and more | 35 | 16 | 119 | 2k+ | | | Non-prefixed global variable |
| #7184 | Popup for CF7 with Sweet Alert | 35 | 26 | 12 | 2k+ | | | Text Domain Mismatch |
| #7185 | CF7 Views – Complete Entry Management for Contact Form 7 | 35 | 172 | 181 | 1k+ | | | Output is not escaped |
| #7186 | Change Last Modified Date | 35 | 7 | 1 | 3k+ | | | Missing direct file access protection |
| #7187 | Change Quantity on Checkout for WooCommerce | 35 | 270 | 32 | 4k+ | | | wp function not compatible with requires wp |
| #7188 | Change Username | 35 | 7 | 10 | 4k+ | | | Direct Query |
| #7189 | ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form | 35 | 31 | 188 | 1k+ | | | Non-prefixed global variable |
| #7190 | Payment Gateway Based Fees and Discounts for WooCommerce | 35 | 24 | 68 | 30k+ | | | Non-prefixed hook name |
| #7191 | Child Pages Shortcode | 35 | 5 | 6 | 5k+ | | | Non-prefixed hook name |
| #7192 | CHP Ads Block Detector | 35 | 108 | 35 | 900 | | | Output is not escaped |
| #7193 | CiviCRM Admin Utilities | 35 | 19 | 87 | 1k+ | | | Non-prefixed hook name |
| #7194 | CiviCRM Profile Sync | 35 | 31 | 140 | 600 | | | Non-prefixed global variable |
| #7195 | Cloudflare | 35 | 28 | 85 | 200k+ | | | Non-prefixed namespace |
| #7196 | Flexible SSL for CloudFlare | 35 | 9 | 6 | 100k+ | | | Output is not escaped |
| #7197 | CM E-Mail Blacklist – Simple email filtering for safer registration | 35 | 269 | 205 | 800 | | | Output is not escaped |
| #7198 | Code Block Pro – Beautiful Syntax Highlighting | 35 | 7 | 4 | 10k+ | | | badly named files |
| #7199 | Code Prettify | 35 | 7 | 3 | 1k+ | | | wp function not compatible with requires wp |
| #7200 | CompressX — AVIF & WebP Converter, Media Replacement | 35 | 26 | 423 | 40k+ | | | Missing nonce verification |