| #8751 | AMS Hide Page and Post Title | 80 | 4 | 6 | 500 | | | Input is not sanitized |
| #8752 | Anti-Spambot | 97 | 3 | 2 | 500 | | | Missing direct file access protection |
| #8753 | Augmented Reality Viewer – 3D Model Viewer | 98 | 5 | 2 | 500 | | | wp function not compatible with requires wp |
| #8754 | Web Accessibility Toolkit – Accessibility Checker & ARIA for WCAG, Section 508 & ADA Compliance | 58 | 9 | 20 | 500 | | | Output is not escaped |
| #8755 | Ascending Posts by Fly Plugins | 55 | 23 | 13 | 500 | | | Text Domain Mismatch |
| #8756 | Author Website Templates – Create Writer, Author & Publisher Websites Easily | 22 | 711 | 2,910 | 500 | | | Non-prefixed global variable |
| #8757 | Auto SEO | 98 | 3 | 12 | 500 | | | Non-prefixed global variable |
| #8758 | Auto SRI | 92 | 4 | 1 | 500 | | | wp function not compatible with requires wp |
| #8759 | Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code | 100 | | 2 | 500 | | | Non-prefixed constant |
| #8760 | Avacy CMP | 47 | 5 | 90 | 500 | | | Non-prefixed global variable |
| #8761 | ANAC XML Bandi di Gara | 22 | 294 | 244 | 500 | | | Output is not escaped |
| #8762 | Awesome GDPR Compliant Cookie Consent and Notice | 36 | 653 | 201 | 500 | | | Text Domain Mismatch |
| #8763 | Awesome Widgets for SiteOrigin Page Builder | 33 | 314 | 59 | 500 | | | Text Domain Mismatch |
| #8764 | AZAN Plugin | 37 | 44 | 30 | 500 | | | Output is not escaped |
| #8765 | Banner Upload | 65 | 36 | 4 | 500 | | | Output is not escaped |
| #8766 | Alerts for Beaver Builder | 61 | 42 | 1 | 500 | | | Output is not escaped |
| #8767 | bbPress Voting | 39 | 27 | 53 | 500 | | | Output is not escaped |
| #8768 | bbPress Moderation | 39 | 75 | 15 | 500 | | | Non Singular String Literal Domain |
| #8769 | Beacon Lead Magnets and Lead Capture | 75 | 8 | 25 | 500 | | | Nonce verification recommended |
| #8770 | Beeketing for WooCommerce – Marketing Automation to Boost Sales | 34 | 113 | 123 | 500 | | | SQL query is not prepared |
| #8771 | Arigato Autoresponder and Newsletter | 24 | 1,318 | 769 | 500 | | | Text Domain Mismatch |
| #8772 | Billbee – Auftragsabwicklung, Warenwirtschaft, Automatisierung | 90 | 8 | 7 | 500 | | | Non-prefixed function |
| #8773 | Biteship Shipping | 78 | 25 | 16 | 500 | | | wp function not compatible with requires wp |
| #8774 | Black Ribbon | 66 | 29 | 5 | 500 | | | Output is not escaped |
| #8775 | Black Bar | 69 | 78 | 39 | 500 | | | Short PHP open tag found |
| #8776 | Block Referer Spam | Pending | - | - | 500 | | | Pending scan |
| #8777 | Block Temporary Email | 42 | 33 | 13 | 500 | | | Unsafe printing function |
| #8778 | Blocks Kit – Gutenberg Blocks for Freelancers | 92 | 1 | 9 | 500 | | | Non-prefixed constant |
| #8779 | Blocks to Shortcode – Use blocks everywhere: in page templates, Elementor, etc. | 95 | | 8 | 500 | | | Non-prefixed global variable |
| #8780 | Booking Calendar Contact Form | 25 | 371 | 884 | 500 | | | Input is not validated |
| #8781 | Booster Pack for Divi | 95 | 179 | 2 | 500 | | | Text Domain Mismatch |
| #8782 | BORICA Payments by BORICA AD | 35 | 537 | 196 | 500 | | | Text Domain Mismatch |
| #8783 | Bot Traffic Shield – Block Bad Bots and Stop AI Bots Crawlers | 99 | 1 | 1 | 500 | | | mismatched plugin name |
| #8784 | Яндекс Доставка (Boxberry) | 31 | 46 | 150 | 500 | | | Missing nonce verification |
| #8785 | Member Swipe for BuddyPress | 68 | 9 | 13 | 500 | | | Missing direct file access protection |
| #8786 | Order Delivery Date Time & Pickup for WooCommerce | 29 | 667 | 244 | 500 | | | Output is not escaped |
| #8787 | BP Simple Private | 48 | 19 | 12 | 500 | | | Output is not escaped |
| #8788 | Broadly for WordPress | 64 | 18 | 5 | 500 | | | Unsafe printing function |
| #8789 | Buckets | 34 | 68 | 76 | 500 | | | Output is not escaped |
| #8790 | BuddyPress Default Cover Photo | 39 | 62 | 39 | 500 | | | Output is not escaped |
| #8791 | BuddyPress Profile Completion | 40 | 28 | 30 | 500 | | | Output is not escaped |
| #8792 | Bulk Download for Gravity Forms | 35 | 5 | 2 | 500 | | | Hidden files included |
| #8793 | Bulk Page Stub Creator | 35 | 4 | 2 | 500 | | | Non-prefixed constant |
| #8794 | Buying Buddy IDX CRM – Real Estate MLS Plugin | 35 | 71 | 240 | 500 | | | Request data is not unslashed |
| #8795 | Coming soon Page | 40 | 24 | 18 | 500 | | | Text Domain Mismatch |
| #8796 | BestWebSoft’s Pinterest | 57 | 490 | 176 | 500 | | | Text Domain Mismatch |
| #8797 | bxSlider integration for WordPress | 48 | 126 | 21 | 500 | | | Text Domain Mismatch |
| #8798 | Cache control by Cacholong | 41 | 87 | 30 | 500 | | | Non Singular String Literal Domain |
| #8799 | Campi Moduli Italiani | 34 | 72 | 363 | 500 | | | Unquoted Complex Placeholder |
| #8800 | Card Elements for WPBakery | 90 | 1 | 208 | 500 | | | Non-prefixed global variable |