| #5351 | Avatar Privacy | 37 | 82 | 36 | 1k+ | | | Missing direct file access protection |
| #5352 | AweBooking – Hotel Booking System | 20 | 309 | 514 | 1k+ | | | Non-prefixed global variable |
| #5353 | AWEOS PHP Server Info | 84 | 8 | 3 | 1k+ | | | Output is not escaped |
| #5354 | Awin – Advertiser Tracking for WooCommerce | 35 | 46 | 39 | 1k+ | | | Non Singular String Literal Domain |
| #5355 | AXP Cyrillic to Latin | 35 | 21 | 3 | 1k+ | | | Output is not escaped |
| #5356 | Random Posts and Pages Widget | 37 | 322 | 15 | 1k+ | | | Output is not escaped |
| #5357 | Azigen | 95 | 12 | 0 | 1k+ | | | Missing Arg Domain |
| #5358 | Feeds for TikTok – Display Video Feeds in Grid Layouts | 51 | 18 | 59 | 1k+ | | | Request data is not unslashed |
| #5359 | BabyLoveGrowth Integration | 35 | 2 | 10 | 1k+ | | | Direct Query |
| #5360 | Backend Designer | 41 | 50 | 11 | 1k+ | | | Output is not escaped |
| #5361 | Section Builder with Backgrounds – Customize with Color, Gradient, Image and Parallax. | 93 | 2 | 7 | 1k+ | | | Non-prefixed global variable |
| #5362 | Background Music Manager | 98 | 2 | 0 | 1k+ | | | outdated tested upto header |
| #5363 | Worldline Online Checkout | 88 | 4 | 16 | 1k+ | | | Nonce verification recommended |
| #5364 | Bangladeshi Payments Mobile – QR Code & Transaction Reports | 26 | 535 | 1,280 | 1k+ | | | Non-prefixed global variable |
| #5365 | Banhammer – Monitor Site Traffic, Block Bad Users and Bots | 37 | 104 | 174 | 1k+ | | | Output is not escaped |
| #5366 | Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) | 24 | 1,865 | 1,089 | 1k+ | | | Text Domain Mismatch |
| #5367 | Basic Interactive World Map | 40 | 94 | 54 | 1k+ | | | Text Domain Mismatch |
| #5368 | Batch Comment Spam Deletion | 46 | 22 | 15 | 1k+ | | | Nonce verification recommended |
| #5369 | Cards for Beaver Builder | 51 | 63 | 1 | 1k+ | | | Output is not escaped |
| #5370 | BB Delete cache | 72 | 3 | 15 | 1k+ | | | Input is not sanitized |
| #5371 | Private groups | 30 | 583 | 316 | 1k+ | | | Unsafe printing function |
| #5372 | bbPress WP Tweaks | 40 | 147 | 18 | 1k+ | | | Output is not escaped |
| #5373 | BEA – Sanitize Filename | 99 | 2 | 0 | 1k+ | | | Missing direct file access protection |
| #5374 | Beam me up Scotty – Back to Top Button | 41 | 71 | 38 | 1k+ | | | Output is not escaped |
| #5375 | Beckin Maintenance Mode | 100 | | 0 | 1k+ | | | No open findings |
| #5376 | Before After Image Comparison Slider for WPBakery Page Builder | 35 | 58 | 59 | 1k+ | | | Output is not escaped |
| #5377 | belingoGeo | 35 | 136 | 133 | 1k+ | | | Output is not escaped |
| #5378 | Benchmark Email Lite | 39 | 86 | 23 | 1k+ | | | Output is not escaped |
| #5379 | Great Restaurant Menu WP | 81 | 89 | 100 | 1k+ | | | Text Domain Mismatch |
| #5380 | BestPrice Analytics Integration | 70 | 35 | 10 | 1k+ | | | Text Domain Mismatch |
| #5381 | Better Block Patterns | 48 | 77 | 11 | 1k+ | | | Missing direct file access protection |
| #5382 | Better Chat Support for Messenger | 32 | 73 | 103 | 1k+ | | | Interpolated SQL is not prepared |
| #5383 | Better Internal Link Search | 40 | 23 | 48 | 1k+ | | | strip tags strip tags |
| #5384 | Better Variation Price for WooCommerce | 89 | 5 | 12 | 1k+ | | | Nonce verification recommended |
| #5385 | Bg RuTube Embed | 53 | 19 | 21 | 1k+ | | | Unsafe printing function |
| #5386 | Black Studio Touch Dropdown Menu | 97 | 2 | 3 | 1k+ | | | Not In Footer |
| #5387 | Lord of the Files: Enhanced Upload Security | 35 | 62 | 42 | 1k+ | | | Non-prefixed global variable |
| #5388 | Block AI Crawlers | 100 | | 0 | 1k+ | | | No open findings |
| #5389 | Block for Font Awesome | 98 | 7 | 4 | 1k+ | | | Offloaded Content |
| #5390 | CTC Masonry Gallery 🎨 | 35 | 6 | 3 | 1k+ | | | Hidden files included |
| #5391 | Block Specific Spam Woo Orders | 99 | 1 | 4 | 1k+ | | | Non-prefixed hook name |
| #5392 | Block User Account | 35 | 280 | 143 | 1k+ | | | Unsafe printing function |
| #5393 | BlockMeister – Block Pattern Builder | 24 | 580 | 1,405 | 1k+ | | | Non-prefixed global variable |
| #5394 | Blocks Export Import – Backup & Move Gutenberg Blocks as JSON | 98 | 2 | 11 | 1k+ | | | Non-prefixed global variable |
| #5395 | Blocks for Eventbrite | 35 | 3 | 4 | 1k+ | | | Hidden files included |
| #5396 | Blocks Starter Templates | 99 | 12 | 1 | 1k+ | | | Text Domain Mismatch |
| #5397 | Blog, Posts and Category Filter for Elementor | 36 | 159 | 55 | 1k+ | | | Text Domain Mismatch |
| #5398 | blueimp lightbox | 75 | 19 | 2 | 1k+ | | | Output is not escaped |
| #5399 | Tooltipy (tooltips for WP) | 35 | 370 | 125 | 1k+ | | | Text Domain Mismatch |
| #5400 | BNE Gallery Extended | 86 | 8 | 0 | 1k+ | | | Unsafe printing function |