| #1401 | Tooltipy (tooltips for WP) | 35 | 370 | 125 | 1k+ | | | Text Domain Mismatch |
| #1402 | Plugin BlueX for WooCommerce | 29 | 431 | 216 | 2k+ | | | Text Domain Mismatch |
| #1403 | WP Custom Login | 99 | 1 | 2 | 10k+ | | | trademarked term |
| #1404 | BMI Adult & Kid Calculator | 43 | 33 | 138 | 700 | | | Request data is not unslashed |
| #1405 | BNE Gallery Extended | 86 | 8 | 0 | 1k+ | | | Unsafe printing function |
| #1406 | Customize WordPress Emails and Alerts – Better Notifications for WP | 37 | 64 | 47 | 30k+ | | | Missing Arg Domain |
| #1407 | Post Blocks & Tools | 60 | 9 | 46 | 400 | | | Missing nonce verification |
| #1408 | Boei – AI Chatbot, Live Chat & 50+ Channels for WordPress | 78 | 9 | 4 | 1k+ | | | Output is not escaped |
| #1409 | Bogo | 39 | 30 | 139 | 10k+ | | | Request data is not unslashed |
| #1410 | Bold Page Builder | 91 | 12 | 38 | 40k+ | | | Not In Footer |
| #1411 | Bold pagos en linea | 89 | 4 | 32 | 4k+ | | | Non-prefixed global variable |
| #1412 | Bold Timeline Lite | 71 | 220 | 561 | 10k+ | | | Non-prefixed global variable |
| #1413 | Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid | 25 | 243 | 854 | 50k+ | | | Non-prefixed global variable |
| #1414 | BoldGrid Easy SEO – Simple and Effective SEO | 34 | 149 | 104 | 40k+ | | | Text Domain Mismatch |
| #1415 | Bolt CTA Button – Floating Call Button for WordPress | 99 | 1 | 2 | 1k+ | | | trademarked term |
| #1416 | Book Now | 41 | 75 | 14 | 1k+ | | | Output is not escaped |
| #1417 | Book Previewer for Woocommerce | 68 | 23 | 40 | 1k+ | | | Non-prefixed global variable |
| #1418 | Book Review Block | 91 | 11 | 2 | 1k+ | | | block api version too low |
| #1419 | Bookero.pl – system rezerwacji online | 82 | 12 | 7 | 1k+ | | | curl curl setopt |
| #1420 | Booking Calendar | 54 | 28 | 88 | 50k+ | | | Mixed line endings |
| #1421 | Booking Activities | 25 | 1,036 | 1,469 | 3k+ | | | Output is not escaped |
| #1422 | Booking calendar, Appointment Booking System | 23 | 1,079 | 1,125 | 3k+ | | | Output is not escaped |
| #1423 | Booking Calendar Contact Form | 25 | 371 | 884 | 500 | | | Input is not validated |
| #1424 | Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar | 26 | 526 | 263 | 5k+ | | | Output is not escaped |
| #1425 | Booking Package | 25 | 1,697 | 3,977 | 10k+ | | | Missing nonce verification |
| #1426 | Pinpoint Booking System – Version 2 | 21 | 634 | 328 | 3k+ | | | Missing direct file access protection |
| #1427 | Booking System Trafft | 78 | 3 | 19 | 400 | | | Nonce verification recommended |
| #1428 | Booking Ultra Pro Appointments Booking Calendar Plugin | 21 | 761 | 2,083 | 400 | | | Request data is not unslashed |
| #1429 | Booking.com Official Search Box | 42 | 36 | 32 | 2k+ | | | Output is not escaped |
| #1430 | Booking.com Product Helper | 97 | 2 | 8 | 1k+ | | | Discouraged text-domain loading |
| #1431 | bookingflow Smoobu for WP | 35 | 107 | 12 | 400 | | | Text Domain Mismatch |
| #1432 | Online Scheduling and Appointment Booking System – Bookly | 25 | 1,088 | 888 | 60k+ | | | SQL query is not prepared |
| #1433 | Booktics – Booking Calendar for Appointments and Service Businesses | 96 | 29 | 7 | 700 | | | wp function not compatible with requires wp |
| #1434 | Bookvault | 78 | 13 | 10 | 700 | | | Nonce verification recommended |
| #1435 | Booqable Rental Plugin | 51 | 81 | 18 | 1k+ | | | wp function not compatible with requires wp |
| #1436 | Booster Extension | 37 | 28 | 289 | 7k+ | | | Non-prefixed global variable |
| #1437 | Booster for WPForms | 50 | 79 | 45 | 700 | | | Text Domain Mismatch |
| #1438 | Booster Pack for Divi | 95 | 179 | 2 | 500 | | | Text Domain Mismatch |
| #1439 | Boostify Header Footer Builder for Elementor | 54 | 419 | 55 | 7k+ | | | Text Domain Mismatch |
| #1440 | Booter – Bots & Crawlers Manager | 68 | | 81 | 7k+ | | | Non-prefixed global variable |
| #1441 | Bootstrap for Contact Form 7 | 35 | 35 | 73 | 10k+ | | | Nonce verification recommended |
| #1442 | Bootstrap Modals | 51 | 43 | 8 | 1k+ | | | Output is not escaped |
| #1443 | Bootstrap Shortcodes | 71 | 21 | 11 | 5k+ | | | Missing direct file access protection |
| #1444 | Bop Search Box Item Type For Nav Menus | 41 | 52 | 14 | 1k+ | | | Output is not escaped |
| #1445 | Bopo – WooCommerce Product Bundle Builder | 66 | 137 | 135 | 1k+ | | | Text Domain Mismatch |
| #1446 | Borderless – Addons and Templates for Elementor | 22 | 438 | 1,388 | 5k+ | | | Non-prefixed global variable |
| #1447 | BORICA Payments by BORICA AD | 35 | 537 | 196 | 500 | | | Text Domain Mismatch |
| #1448 | Bosa Elementor Addons and Templates for WooCommerce | 32 | 40 | 165 | 20k+ | | | slow db query tax query |
| #1449 | Bosta WooCommerce | 33 | 303 | 180 | 700 | | | Text Domain Mismatch |
| #1450 | Bot Block – Stop Spam Referrals in Google Analytics | 38 | 28 | 42 | 600 | | | Output is not escaped |