| #1451 | Bosta WooCommerce | 33 | 303 | 180 | 700 | | | Text Domain Mismatch |
| #1452 | Bot Block – Stop Spam Referrals in Google Analytics | 38 | 28 | 42 | 600 | | | Output is not escaped |
| #1453 | Bot Traffic Shield – Block Bad Bots and Stop AI Bots Crawlers | 99 | 1 | 1 | 500 | | | mismatched plugin name |
| #1454 | BotBlocker Security – Firewall & Bot Protection | 99 | | 5 | 3k+ | | | Non-prefixed constant |
| #1455 | BotPenguin – Generative AI Chatbot with Live Chat & ChatGPT | 56 | 12 | 7 | 600 | | | Unsafe printing function |
| #1456 | Bottom Admin Toolbar | 89 | 5 | 1 | 1k+ | | | Output is not escaped |
| #1457 | BotWriter – AI Writer & SEO Content Generator | 35 | 16 | 504 | 3k+ | | | Direct Query |
| #1458 | BOX NOW Delivery Croatia | 39 | 64 | 99 | 800 | | | Missing nonce verification |
| #1459 | Яндекс Доставка (Boxberry) | 31 | 46 | 150 | 500 | | | Missing nonce verification |
| #1460 | Boxtal – Shipping solution | 86 | 3 | 92 | 9k+ | | | Non-prefixed global variable |
| #1461 | Boxy WooCommerce Custom Redirect After Checkout | 74 | 27 | 8 | 600 | | | badly named files |
| #1462 | BuddyPress Activity Filter | 35 | 25 | 66 | 400 | | | Nonce verification recommended |
| #1463 | Activity Plus Reloaded for BuddyPress | 33 | 88 | 93 | 1k+ | | | Output is not escaped |
| #1464 | BuddyPress Activity Shortcode | 73 | 9 | 14 | 2k+ | | | Non-prefixed hook name |
| #1465 | Wbcom Designs – BuddyPress Activity Social Share | 35 | 293 | 27 | 400 | | | Text Domain Mismatch |
| #1466 | BP Auto Group Join | 42 | 55 | 55 | 700 | | | Output is not escaped |
| #1467 | Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots | 22 | 1,606 | 2,018 | 10k+ | | | Direct Query |
| #1468 | BP Classic | 32 | 664 | 216 | 6k+ | | | Unsafe printing function |
| #1469 | Custom Profile Menu for BuddyPress | 77 | 8 | 4 | 400 | | | Output is not escaped |
| #1470 | Custom Order Status Manager for WooCommerce | 35 | 630 | 67 | 30k+ | | | Text Domain Mismatch |
| #1471 | BuddyPress Default Data | 71 | 8 | 21 | 400 | | | Interpolated SQL is not prepared |
| #1472 | BP Disable Activation Reloaded | 36 | 147 | 28 | 800 | | | Output is not escaped |
| #1473 | BP Group Documents | 36 | 27 | 195 | 600 | | | Non-prefixed global variable |
| #1474 | Member Swipe for BuddyPress | 68 | 9 | 13 | 500 | | | Missing direct file access protection |
| #1475 | Order Delivery Date Time & Pickup for WooCommerce | 29 | 667 | 244 | 500 | | | Output is not escaped |
| #1476 | BP Profile Search | 36 | 321 | 85 | 5k+ | | | Output is not escaped |
| #1477 | BuddyPress Login Redirect to Profile | 97 | 3 | 2 | 600 | | | trademarked term |
| #1478 | Registration Options for BuddyPress | 35 | 47 | 132 | 1k+ | | | Non-prefixed function |
| #1479 | BP Simple Private | 48 | 19 | 12 | 500 | | | Output is not escaped |
| #1480 | Block, Suspend, Report for BuddyPress | 96 | 3 | 24 | 600 | | | slow db query meta query |
| #1481 | Verified Member for BuddyPress | 47 | 20 | 38 | 3k+ | | | Nonce verification recommended |
| #1482 | BuddyPress Xprofile Custom Field Types | 41 | 39 | 189 | 4k+ | | | Missing nonce verification |
| #1483 | BP xProfile Location | 74 | 7 | 24 | 500 | | | Missing nonce verification |
| #1484 | bpost shipping | 36 | 97 | 43 | 700 | | | Output is not escaped |
| #1485 | Bradmax Player | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #1486 | Branda – White Label & Branding, Free Login Page Customizer | 24 | 3,174 | 820 | 20k+ | | | Text Domain Mismatch |
| #1487 | Branded Social Images – Open Graph Images with logo and extra text layer | 29 | 254 | 91 | 900 | | | Non Singular String Literal Domain |
| #1488 | Brands for WooCommerce | 24 | 773 | 693 | 6k+ | | | Text Domain Mismatch |
| #1489 | Breadcrumb – Breadcrumb for WooCommerce and Custom Post Types | 45 | 3 | 107 | 10k+ | | | Request data is not unslashed |
| #1490 | Breadcrumb Block | 100 | | 0 | 3k+ | | | No open findings |
| #1491 | Breadcrumb NavXT | 36 | 102 | 111 | 800k+ | | | Non Singular String Literal Domain |
| #1492 | Breadcrumb Trail | 89 | 6 | 4 | 10k+ | | | Non-prefixed hook name |
| #1493 | Breadcrumbs Divi Module | 67 | 44 | 38 | 10k+ | | | Text Domain Mismatch |
| #1494 | Breeze Cache | 25 | 218 | 800 | 400k+ | | | Non-prefixed global variable |
| #1495 | Bricksable for Bricks Builder | 80 | 1 | 76 | 10k+ | | | Post Not In exclude |
| #1496 | Bricks Navigator | 94 | 1 | 5 | 8k+ | | | Nonce verification recommended |
| #1497 | Brightcove Video Connect | 35 | 580 | 235 | 600 | | | Text Domain Mismatch |
| #1498 | BrightEdge Autopilot | 30 | 108 | 31 | 600 | | | curl curl setopt |
| #1499 | BrikPanel: WooCommerce Dashboard, Abandoned Cart Recovery, Google Sheets Sync, Inventory Management & Bulk Editor | 24 | 4,313 | 1,425 | 600 | | | Text Domain Mismatch |
| #1500 | Bring Back the Get Shortlink Button | 99 | 2 | 0 | 1k+ | | | Missing direct file access protection |