| #8251 | Bicycles by falbar | 35 | 426 | 65 | 600 | | | Output is not escaped |
| #8252 | Slider and Carousel Block – Responsive, Accessible | 100 | | 0 | 600 | | | No open findings |
| #8253 | Tabs Block – Responsive Gutenberg Tabs for Block Editor | 99 | | 20 | 600 | | | Non-prefixed global variable |
| #8254 | Block Editor: Reverse Columns on Mobile | 100 | | 0 | 600 | | | No open findings |
| #8255 | Block Pattern Builder | 86 | 10 | 5 | 600 | | | Missing Translators Comment |
| #8256 | Block Responsive – Make Editor Blocks Responsive Easily | 100 | | 0 | 600 | | | No open findings |
| #8257 | Block wp-login | 98 | 16 | 3 | 600 | | | wp function not compatible with requires wp |
| #8258 | Blockly – Gutenberg Blocks | 86 | 6 | 17 | 600 | | | Non-prefixed constant |
| #8259 | Blocks – Reusable Content, Shortcodes & Site Variables | 92 | 1 | 4 | 600 | | | Database parameter is not escaped |
| #8260 | Blog Time | 57 | 38 | 6 | 600 | | | Output is not escaped |
| #8261 | Bot Block – Stop Spam Referrals in Google Analytics | 38 | 28 | 42 | 600 | | | Output is not escaped |
| #8262 | BotPenguin – Generative AI Chatbot with Live Chat & ChatGPT | 56 | 12 | 7 | 600 | | | Unsafe printing function |
| #8263 | Boxy WooCommerce Custom Redirect After Checkout | 74 | 27 | 8 | 600 | | | badly named files |
| #8264 | BP Group Documents | 36 | 27 | 195 | 600 | | | Non-prefixed global variable |
| #8265 | BuddyPress Login Redirect to Profile | 97 | 3 | 2 | 600 | | | trademarked term |
| #8266 | Block, Suspend, Report for BuddyPress | 96 | 3 | 24 | 600 | | | slow db query meta query |
| #8267 | BP xProfile Location | 74 | 7 | 24 | 600 | | | Missing nonce verification |
| #8268 | Brightcove Video Connect | 35 | 580 | 235 | 600 | | | Text Domain Mismatch |
| #8269 | BrightEdge Autopilot | 30 | 107 | 31 | 600 | | | curl curl setopt |
| #8270 | BrikPanel: WooCommerce Dashboard, Abandoned Cart Recovery, Google Sheets Sync, Inventory Management & Bulk Editor | 24 | 4,385 | 1,489 | 600 | | | Text Domain Mismatch |
| #8271 | 404 Image Redirection (Replace Broken Images) | 47 | 118 | 85 | 600 | | | Text Domain Mismatch |
| #8272 | BuddyMeet | 36 | 114 | 32 | 600 | | | Unsafe printing function |
| #8273 | BuddyPress Notification Widget | 39 | 54 | 31 | 600 | | | Output is not escaped |
| #8274 | Bulk Comments Management | 75 | 6 | 25 | 600 | | | Direct Query |
| #8275 | Better WordPress Recent Comments | 36 | 319 | 69 | 600 | | | Text Domain Mismatch |
| #8276 | BZScore – Live Score | 94 | 5 | 3 | 600 | | | strip tags strip tags |
| #8277 | Social Chat Widget (⚡ by Callbell) | 71 | 11 | 6 | 600 | | | Output is not escaped |
| #8278 | Card Transfer Gateway | 98 | 2 | 2 | 600 | | | Discouraged text-domain loading |
| #8279 | Cashflows for WooCommerce | 36 | 119 | 36 | 600 | | | Text Domain Mismatch |
| #8280 | Category Featured Images | 68 | 5 | 12 | 600 | | | Input is not sanitized |
| #8281 | Integration of Bitrix24 with Contact Form 7 | 83 | 14 | 40 | 600 | | | Non-prefixed function |
| #8282 | Contact Form 7 extension for Google Map fields | 39 | 118 | 58 | 600 | | | Missing Arg Domain |
| #8283 | Contact Form 7 to Mailjet | 40 | 70 | 39 | 600 | | | Output is not escaped |
| #8284 | Chap Secure Password Login | 72 | 13 | 7 | 600 | | | Input is not validated |
| #8285 | Kognetiks Chatbot for WordPress | 24 | 651 | 1,486 | 600 | | | Non-prefixed global variable |
| #8286 | Check for Broken Links – Broken Link Checker & 404 Monitor | 62 | 2 | 32 | 600 | | | Missing nonce verification |
| #8287 | Checkout for PayPal | 37 | 134 | 67 | 600 | | | Unsafe printing function |
| #8288 | Checkout Upsell Funnel for WooCommerce | 44 | 6 | 244 | 600 | | | Non-prefixed global variable |
| #8289 | CHEQ Essentials | 56 | 14 | 49 | 600 | | | Request data is not unslashed |
| #8290 | Clean Archives Reloaded | 55 | 25 | 6 | 600 | | | Unsafe printing function |
| #8291 | Clean WP Admin Menu | 74 | 19 | 13 | 600 | | | Non Singular String Literal Domain |
| #8292 | Clearout Email Validator – Real-Time Email Verification on WordPress Forms | 68 | 21 | 80 | 600 | | | Non-prefixed function |
| #8293 | Fetchify | 85 | 154 | 19 | 600 | | | Text Domain Mismatch |
| #8294 | CloudFilt Bot & Spam Protection | 51 | 11 | 22 | 600 | | | Output is not escaped |
| #8295 | Code Block Syntax Highlighter for Elementor | 78 | 344 | 3 | 600 | | | Non Singular String Literal Domain |
| #8296 | Bitly URL Shortener | 79 | 65 | 22 | 600 | | | Text Domain Mismatch |
| #8297 | CodePen Embed Block | 82 | 8 | 3 | 600 | | | Text Domain Mismatch |
| #8298 | Colete-Online | 30 | 776 | 346 | 600 | | | Text Domain Mismatch |
| #8299 | Collapsible Categories in the Dashboard | 98 | 3 | 0 | 600 | | | Missing direct file access protection |
| #8300 | Ultimate WooCommerce Filters | 32 | 322 | 207 | 600 | | | Unsafe printing function |