| #5351 | Automatik Blog | 97 | 5 | 23 | 1k+ | | | Non-prefixed global variable |
| #5352 | Autoset Featured Image | 97 | 5 | 0 | 1k+ | | | Missing direct file access protection |
| #5353 | AutoWP – AI Content Writer & Rewriter | 30 | 548 | 370 | 1k+ | | | Text Domain Mismatch |
| #5354 | avalex – Automatisch sichere Rechtstexte | 37 | 25 | 85 | 1k+ | | | Direct Query |
| #5355 | Avantex Companion | 90 | 35 | 100 | 1k+ | | | Non-prefixed global variable |
| #5356 | Avatar Privacy | 37 | 82 | 36 | 1k+ | | | Missing direct file access protection |
| #5357 | AweBooking – Hotel Booking System | 20 | 309 | 514 | 1k+ | | | Non-prefixed global variable |
| #5358 | Awin – Advertiser Tracking for WooCommerce | 35 | 46 | 39 | 1k+ | | | Non Singular String Literal Domain |
| #5359 | AXP Cyrillic to Latin | 35 | 21 | 3 | 1k+ | | | Output is not escaped |
| #5360 | Random Posts and Pages Widget | 37 | 322 | 15 | 1k+ | | | Output is not escaped |
| #5361 | Azigen | 95 | 12 | 0 | 1k+ | | | Missing Arg Domain |
| #5362 | Feeds for TikTok – Display Video Feeds in Grid Layouts | 51 | 18 | 59 | 1k+ | | | Request data is not unslashed |
| #5363 | BabyLoveGrowth Integration | 35 | 2 | 10 | 1k+ | | | Direct Query |
| #5364 | Backend Designer | 41 | 50 | 11 | 1k+ | | | Output is not escaped |
| #5365 | Section Builder with Backgrounds – Customize with Color, Gradient, Image and Parallax. | 93 | 2 | 7 | 1k+ | | | Non-prefixed global variable |
| #5366 | Background Music Manager | 98 | 2 | 0 | 1k+ | | | outdated tested upto header |
| #5367 | Worldline Online Checkout | 88 | 4 | 16 | 1k+ | | | Nonce verification recommended |
| #5368 | Bangladeshi Payments Mobile – QR Code & Transaction Reports | 26 | 535 | 1,280 | 1k+ | | | Non-prefixed global variable |
| #5369 | Banhammer – Monitor Site Traffic, Block Bad Users and Bots | 37 | 104 | 174 | 1k+ | | | Output is not escaped |
| #5370 | Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) | 24 | 1,865 | 1,089 | 1k+ | | | Text Domain Mismatch |
| #5371 | Basic Interactive World Map | 40 | 94 | 54 | 1k+ | | | Text Domain Mismatch |
| #5372 | Batch Comment Spam Deletion | 46 | 22 | 15 | 1k+ | | | Nonce verification recommended |
| #5373 | Cards for Beaver Builder | 51 | 63 | 1 | 1k+ | | | Output is not escaped |
| #5374 | Private groups | 30 | 583 | 316 | 1k+ | | | Unsafe printing function |
| #5375 | bbPress WP Tweaks | 40 | 147 | 18 | 1k+ | | | Output is not escaped |
| #5376 | BEA – Sanitize Filename | 99 | 2 | 0 | 1k+ | | | Missing direct file access protection |
| #5377 | Beam me up Scotty – Back to Top Button | 41 | 71 | 38 | 1k+ | | | Output is not escaped |
| #5378 | Beckin Maintenance Mode | 100 | | 0 | 1k+ | | | No open findings |
| #5379 | Before After Image Comparison Slider for WPBakery Page Builder | 35 | 58 | 59 | 1k+ | | | Output is not escaped |
| #5380 | belingoGeo | 35 | 136 | 133 | 1k+ | | | Output is not escaped |
| #5381 | Benchmark Email Lite | 39 | 86 | 23 | 1k+ | | | Output is not escaped |
| #5382 | Great Restaurant Menu WP | 81 | 89 | 100 | 1k+ | | | Text Domain Mismatch |
| #5383 | BestPrice Analytics Integration | 70 | 35 | 10 | 1k+ | | | Text Domain Mismatch |
| #5384 | Better Block Patterns | 48 | 77 | 11 | 1k+ | | | Missing direct file access protection |
| #5385 | Better Chat Support for Messenger | 32 | 73 | 103 | 1k+ | | | Interpolated SQL is not prepared |
| #5386 | Better Internal Link Search | 40 | 23 | 48 | 1k+ | | | strip tags strip tags |
| #5387 | Better Variation Price for WooCommerce | 89 | 5 | 12 | 1k+ | | | Nonce verification recommended |
| #5388 | Bg RuTube Embed | 53 | 19 | 21 | 1k+ | | | Unsafe printing function |
| #5389 | Black Studio Touch Dropdown Menu | 97 | 2 | 3 | 1k+ | | | Not In Footer |
| #5390 | Lord of the Files: Enhanced Upload Security | 35 | 62 | 42 | 1k+ | | | Non-prefixed global variable |
| #5391 | Block AI Crawlers | 100 | | 0 | 1k+ | | | No open findings |
| #5392 | Block for Font Awesome | 98 | 7 | 4 | 1k+ | | | Offloaded Content |
| #5393 | CTC Masonry Gallery 🎨 | 35 | 6 | 3 | 1k+ | | | Hidden files included |
| #5394 | Block Specific Spam Woo Orders | 99 | 1 | 4 | 1k+ | | | Non-prefixed hook name |
| #5395 | Block User Account | 35 | 280 | 143 | 1k+ | | | Unsafe printing function |
| #5396 | BlockMeister – Block Pattern Builder | 24 | 580 | 1,405 | 1k+ | | | Non-prefixed global variable |
| #5397 | Blocks Export Import – Backup & Move Gutenberg Blocks as JSON | 98 | 2 | 11 | 1k+ | | | Non-prefixed global variable |
| #5398 | Blocks for Eventbrite | 35 | 3 | 4 | 1k+ | | | Hidden files included |
| #5399 | Blocks Starter Templates | 98 | 13 | 1 | 1k+ | | | Text Domain Mismatch |
| #5400 | Blog, Posts and Category Filter for Elementor | 36 | 159 | 55 | 1k+ | | | Text Domain Mismatch |