| #1251 | bbPress Moderation | 39 | 75 | 15 | 500 | | | Non Singular String Literal Domain |
| #1252 | BBSpoiler | 95 | 5 | 7 | 4k+ | | | Missing Version |
| #1253 | Custom Thank You Page Customize For WooCommerce by Binary Carpenter | 37 | 45 | 80 | 2k+ | | | error log error log |
| #1254 | Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam | 31 | 598 | 70 | 700 | | | Text Domain Mismatch |
| #1255 | BCM Duplicate Menu | 58 | 8 | 11 | 4k+ | | | Nonce verification recommended |
| #1256 | Element Pack Addons for Elementor – Widgets, Templates and Addons | 20 | 10,338 | 359 | 100k+ | | | Text Domain Mismatch |
| #1257 | Prime Slider Addons for Elementor | 18 | 3,501 | 229 | 100k+ | | | Text Domain Mismatch |
| #1258 | Password Reset with Code for WordPress REST API | 66 | 24 | 8 | 900 | | | Exception output is not escaped |
| #1259 | BEA – Sanitize Filename | 99 | 2 | 0 | 1k+ | | | Missing direct file access protection |
| #1260 | Beacon Lead Magnets and Lead Capture | 75 | 8 | 25 | 500 | | | Nonce verification recommended |
| #1261 | Ultimate Before After Image Slider & Gallery – BEAF | 33 | 488 | 87 | 30k+ | | | Text Domain Mismatch |
| #1262 | Beam me up Scotty – Back to Top Button | 41 | 71 | 38 | 1k+ | | | Output is not escaped |
| #1263 | Beautiful Cookie Consent Banner | 41 | 33 | 76 | 40k+ | | | Non-prefixed global variable |
| #1264 | Beautiful taxonomy filters | 64 | 38 | 78 | 2k+ | | | Non-prefixed global variable |
| #1265 | Beauty Form Styler for Gravity Forms | 38 | 70 | 93 | 600 | | | Output is not escaped |
| #1266 | Beaver Builder Page Builder – Drag and Drop Website Builder | 25 | 4,463 | 1,819 | 100k+ | | | Text Domain Mismatch |
| #1267 | Beckin Maintenance Mode | 100 | | 0 | 1k+ | | | No open findings |
| #1268 | Beds24 Online Booking | 23 | 532 | 374 | 2k+ | | | wp function not compatible with requires wp |
| #1269 | Beehive Analytics – Google Analytics Dashboard | 90 | 611 | 22 | 20k+ | | | Text Domain Mismatch |
| #1270 | Beeketing for WooCommerce – Marketing Automation to Boost Sales | 34 | 113 | 123 | 600 | | | SQL query is not prepared |
| #1271 | Before After Image Comparison Slider for WPBakery Page Builder | 35 | 58 | 59 | 1k+ | | | Output is not escaped |
| #1272 | Before + After Images for Divi | 97 | 12 | 3 | 3k+ | | | Missing direct file access protection |
| #1273 | belingoGeo | 35 | 136 | 133 | 1k+ | | | Output is not escaped |
| #1274 | Bellows Accordion Menu | 37 | 160 | 28 | 10k+ | | | Text Domain Mismatch |
| #1275 | Benchmark Email Lite | 39 | 86 | 23 | 1k+ | | | Output is not escaped |
| #1276 | Advanced Classic Editor | 99 | 1 | 1 | 2k+ | | | Non-prefixed function |
| #1277 | Great Restaurant Menu WP | 81 | 89 | 100 | 1k+ | | | Text Domain Mismatch |
| #1278 | Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces | 24 | 2,317 | 3,375 | 10k+ | | | slow db query meta key |
| #1279 | Bestfreebie Elementor Icons | 73 | 27 | 13 | 400 | | | Text Domain Mismatch |
| #1280 | Better 404 Redirect To Homepage | 94 | 3 | 3 | 600 | | | Missing direct file access protection |
| #1281 | Better Admin Bar | 54 | 27 | 63 | 3k+ | | | Non-prefixed global variable |
| #1282 | Better Google Analytics | 29 | 376 | 869 | 2k+ | | | Non-prefixed global variable |
| #1283 | Better Aria Label Support | 99 | 3 | 0 | 5k+ | | | Missing direct file access protection |
| #1284 | Better Block Patterns | 48 | 77 | 11 | 1k+ | | | Missing direct file access protection |
| #1285 | Better Blockquotes | 98 | 1 | 2 | 400 | | | Non-prefixed hook name |
| #1286 | Better Business Reviews – Trustpilot WordPress Plugin | 85 | 4 | 7 | 3k+ | | | Output is not escaped |
| #1287 | Better Chat Support for Messenger | 32 | 73 | 103 | 1k+ | | | Interpolated SQL is not prepared |
| #1288 | Better Click To Share – Shareable Quote Boxes for X (Twitter) | 37 | 170 | 59 | 6k+ | | | Unsafe printing function |
| #1289 | Better Addons for Elementor | 87 | 125 | 221 | 4k+ | | | Non-prefixed global variable |
| #1290 | Better Font Awesome | 79 | 6 | 9 | 70k+ | | | Input is not sanitized |
| #1291 | Better image sizes | 46 | 45 | 23 | 2k+ | | | Text Domain Mismatch |
| #1292 | Better Internal Link Search | 40 | 23 | 48 | 1k+ | | | strip tags strip tags |
| #1293 | Better Menu Widget | 54 | 32 | 1 | 600 | | | Output is not escaped |
| #1294 | Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More | 24 | 342 | 930 | 6k+ | | | Non-prefixed global variable |
| #1295 | Better Plugin Compatibility Control | 35 | 7 | 4 | 4k+ | | | trademarked term |
| #1296 | Better Post & Filter Widgets for Elementor | 84 | 7 | 27 | 3k+ | | | slow db query tax query |
| #1297 | Better Random Redirect | 39 | 88 | 40 | 700 | | | Text Domain Mismatch |
| #1298 | Better Recent Comments | 35 | 127 | 29 | 2k+ | | | Text Domain Mismatch |
| #1299 | Better REST API Featured Images | 98 | 4 | 1 | 2k+ | | | Deprecated parameter: load_plugin_textdomain parameter 2 |
| #1300 | Better Robots.txt – AI-Ready Crawl Control & Bot Governance | 32 | 55 | 83 | 5k+ | | | error log error log |