| #5401 | blueimp lightbox | 75 | 19 | 2 | 1k+ | | | Output is not escaped |
| #5402 | Tooltipy (tooltips for WP) | 35 | 370 | 125 | 1k+ | | | Text Domain Mismatch |
| #5403 | BNE Gallery Extended | 86 | 8 | 0 | 1k+ | | | Unsafe printing function |
| #5404 | BNE Testimonials | 29 | 521 | 102 | 1k+ | | | Output is not escaped |
| #5405 | Boei – AI Chatbot, Live Chat & 50+ Channels for WordPress | 78 | 9 | 4 | 1k+ | | | Output is not escaped |
| #5406 | Bolt CTA Button – Floating Call Button for WordPress | 99 | 1 | 2 | 1k+ | | | trademarked term |
| #5407 | Book Now | 41 | 75 | 14 | 1k+ | | | Output is not escaped |
| #5408 | Book Previewer for Woocommerce | 68 | 23 | 40 | 1k+ | | | Non-prefixed global variable |
| #5409 | Book Review Block | 91 | 11 | 2 | 1k+ | | | block api version too low |
| #5410 | Bookero.pl – system rezerwacji online | 82 | 12 | 7 | 1k+ | | | curl curl setopt |
| #5411 | Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment | 25 | 260 | 1,561 | 1k+ | | | Non-prefixed global variable |
| #5412 | Booking.com Product Helper | 97 | 2 | 8 | 1k+ | | | Discouraged text-domain loading |
| #5413 | Booqable Rental Plugin | 51 | 81 | 18 | 1k+ | | | wp function not compatible with requires wp |
| #5414 | Bootstrap Modals | 51 | 43 | 8 | 1k+ | | | Output is not escaped |
| #5415 | Bop Search Box Item Type For Nav Menus | 41 | 52 | 14 | 1k+ | | | Output is not escaped |
| #5416 | Bopo – WooCommerce Product Bundle Builder | 66 | 137 | 135 | 1k+ | | | Text Domain Mismatch |
| #5417 | Bottom Admin Toolbar | 89 | 5 | 1 | 1k+ | | | Output is not escaped |
| #5418 | Activity Plus Reloaded for BuddyPress | 33 | 88 | 93 | 1k+ | | | Output is not escaped |
| #5419 | Registration Options for BuddyPress | 35 | 47 | 132 | 1k+ | | | Non-prefixed function |
| #5420 | Bradmax Player | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #5421 | Bring Back the Get Shortlink Button | 99 | 2 | 0 | 1k+ | | | Missing direct file access protection |
| #5422 | Broken Link Notifier | 40 | 11 | 193 | 1k+ | | | Non-prefixed global variable |
| #5423 | BSK Forms Blacklist | 35 | 831 | 550 | 1k+ | | | Output is not escaped |
| #5424 | BT iPay Payments | 98 | 2 | 13 | 1k+ | | | Non-prefixed global variable |
| #5425 | BTCPay Server – Accept Bitcoin payments in WooCommerce | 35 | 48 | 86 | 1k+ | | | Missing nonce verification |
| #5426 | Bubble Menu – Floating Button Menu with Sticky Navigation | 40 | 2 | 216 | 1k+ | | | Nonce verification recommended |
| #5427 | BuddyDrive | 23 | 722 | 1,597 | 1k+ | | | Non-prefixed global variable |
| #5428 | BuddyPress Follow | 38 | 114 | 67 | 1k+ | | | Text Domain Mismatch |
| #5429 | BuddyPress Group Email Subscription | 24 | 51 | 336 | 1k+ | | | Non-prefixed function |
| #5430 | BuddyPress for LearnDash | 32 | 190 | 284 | 1k+ | | | Output is not escaped |
| #5431 | BuddyPress Members Only | 37 | 184 | 80 | 1k+ | | | Text Domain Mismatch |
| #5432 | Builderall for WordPress | 23 | 4,782 | 1,308 | 1k+ | | | Text Domain Mismatch |
| #5433 | Bulk Edit and Create User Profiles – WP Sheet Editor | 24 | 979 | 969 | 1k+ | | | Text Domain Mismatch |
| #5434 | Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO) | 41 | 16 | 37 | 1k+ | | | Missing nonce verification |
| #5435 | Bulk Images to Posts | 41 | 55 | 5 | 1k+ | | | Unsafe printing function |
| #5436 | Bulk menu creator | 69 | 27 | 4 | 1k+ | | | Text Domain Mismatch |
| #5437 | Bullhorn Career Portal WordPress Plugin | 46 | 46 | 7 | 1k+ | | | Output is not escaped |
| #5438 | Business Card Block – Display Business or Personal Info in Card Format | 100 | | 1 | 1k+ | | | mismatched plugin name |
| #5439 | Business Reviews – Display Customer Reviews from Popular Sites | 59 | 10 | 31 | 1k+ | | | Non-prefixed class |
| #5440 | Widget for Google Reviews | 97 | 3 | 4 | 1k+ | | | Discouraged text-domain loading |
| #5441 | Businessx Extensions | 29 | 337 | 529 | 1k+ | | | Non-prefixed function |
| #5442 | Buttons to Edit Next/Previous Post | 80 | 12 | 1 | 1k+ | | | Output is not escaped |
| #5443 | Pantheon Migrations | 57 | 15 | 26 | 1k+ | | | Output is not escaped |
| #5444 | Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress | 49 | 478 | 176 | 1k+ | | | Text Domain Mismatch |
| #5445 | SMTP by BestWebSoft | 56 | 486 | 175 | 1k+ | | | Text Domain Mismatch |
| #5446 | Cache-Control | 57 | 26 | 4 | 1k+ | | | Output is not escaped |
| #5447 | Cache Images | 39 | 72 | 27 | 1k+ | | | Unsafe printing function |
| #5448 | Cache Warmer | 38 | 32 | 219 | 1k+ | | | Interpolated SQL is not prepared |
| #5449 | Cachebuster | 98 | 3 | 1 | 1k+ | | | Missing direct file access protection |
| #5450 | Cal.com | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |