| #8751 | Auto SEO | 98 | 3 | 12 | 500 | | | Non-prefixed global variable |
| #8752 | Auto SRI | 92 | 4 | 1 | 500 | | | wp function not compatible with requires wp |
| #8753 | Autoload Optimizer | 92 | | 13 | 500 | | | Direct Query |
| #8754 | Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code | 100 | | 2 | 500 | | | Non-prefixed constant |
| #8755 | Avacy CMP | 47 | 5 | 90 | 500 | | | Non-prefixed global variable |
| #8756 | Awesome GDPR Compliant Cookie Consent and Notice | 36 | 653 | 201 | 500 | | | Text Domain Mismatch |
| #8757 | Awesome Widgets for SiteOrigin Page Builder | 33 | 314 | 59 | 500 | | | Text Domain Mismatch |
| #8758 | AZAN Plugin | 37 | 44 | 30 | 500 | | | Output is not escaped |
| #8759 | Banner Upload | 65 | 36 | 4 | 500 | | | Output is not escaped |
| #8760 | Alerts for Beaver Builder | 61 | 42 | 1 | 500 | | | Output is not escaped |
| #8761 | bbPress Voting | 39 | 27 | 53 | 500 | | | Output is not escaped |
| #8762 | bbPress Moderation | 39 | 75 | 15 | 500 | | | Non Singular String Literal Domain |
| #8763 | Beacon Lead Magnets and Lead Capture | 75 | 8 | 25 | 500 | | | Nonce verification recommended |
| #8764 | Beeketing for WooCommerce – Marketing Automation to Boost Sales | 34 | 113 | 123 | 500 | | | SQL query is not prepared |
| #8765 | Arigato Autoresponder and Newsletter | 24 | 1,318 | 769 | 500 | | | Text Domain Mismatch |
| #8766 | Billbee – Auftragsabwicklung, Warenwirtschaft, Automatisierung | 90 | 8 | 7 | 500 | | | Non-prefixed function |
| #8767 | Biteship Shipping | 78 | 25 | 16 | 500 | | | wp function not compatible with requires wp |
| #8768 | Black Ribbon | 66 | 29 | 5 | 500 | | | Output is not escaped |
| #8769 | Black Bar | 69 | 78 | 39 | 500 | | | Short PHP open tag found |
| #8770 | Block Referer Spam | Pending | - | - | 500 | | | Pending scan |
| #8771 | Block Temporary Email | 42 | 33 | 13 | 500 | | | Unsafe printing function |
| #8772 | Blocks Kit – Gutenberg Blocks for Freelancers | 92 | 1 | 9 | 500 | | | Non-prefixed constant |
| #8773 | Blocks to Shortcode – Use blocks everywhere: in page templates, Elementor, etc. | 95 | | 8 | 500 | | | Non-prefixed global variable |
| #8774 | Booking Calendar Contact Form | 25 | 371 | 884 | 500 | | | Input is not validated |
| #8775 | Booster Pack for Divi | 95 | 179 | 2 | 500 | | | Text Domain Mismatch |
| #8776 | BORICA Payments by BORICA AD | 35 | 537 | 196 | 500 | | | Text Domain Mismatch |
| #8777 | Bot Traffic Shield – Block Bad Bots and Stop AI Bots Crawlers | 99 | 1 | 1 | 500 | | | mismatched plugin name |
| #8778 | Яндекс Доставка (Boxberry) | 31 | 46 | 150 | 500 | | | Missing nonce verification |
| #8779 | Member Swipe for BuddyPress | 68 | 9 | 13 | 500 | | | Missing direct file access protection |
| #8780 | Order Delivery Date Time & Pickup for WooCommerce | 29 | 667 | 244 | 500 | | | Output is not escaped |
| #8781 | BP Simple Private | 48 | 19 | 12 | 500 | | | Output is not escaped |
| #8782 | BP xProfile Location | 74 | 7 | 24 | 500 | | | Missing nonce verification |
| #8783 | BrikPanel: WooCommerce Dashboard, Abandoned Cart Recovery, Google Sheets Sync, Inventory Management & Bulk Editor | 24 | 4,313 | 1,425 | 500 | | | Text Domain Mismatch |
| #8784 | Bring Fraktguiden for WooCommerce | Pending | - | - | 500 | | | Pending scan |
| #8785 | Broadly for WordPress | 64 | 18 | 5 | 500 | | | Unsafe printing function |
| #8786 | Buckets | 34 | 68 | 76 | 500 | | | Output is not escaped |
| #8787 | BuddyPress Default Cover Photo | 39 | 62 | 39 | 500 | | | Output is not escaped |
| #8788 | BuddyPress Profile Completion | 40 | 28 | 30 | 500 | | | Output is not escaped |
| #8789 | Bulk Download for Gravity Forms | 35 | 5 | 2 | 500 | | | Hidden files included |
| #8790 | Bulk Page Stub Creator | 35 | 4 | 2 | 500 | | | Non-prefixed constant |
| #8791 | Buying Buddy IDX CRM – Real Estate MLS Plugin | 35 | 71 | 240 | 500 | | | Request data is not unslashed |
| #8792 | Coming soon Page | 40 | 24 | 18 | 500 | | | Text Domain Mismatch |
| #8793 | BestWebSoft’s Pinterest | 57 | 490 | 176 | 500 | | | Text Domain Mismatch |
| #8794 | bxSlider integration for WordPress | 48 | 126 | 21 | 500 | | | Text Domain Mismatch |
| #8795 | Cache control by Cacholong | 41 | 87 | 30 | 500 | | | Non Singular String Literal Domain |
| #8796 | Campi Moduli Italiani | 34 | 72 | 363 | 500 | | | Unquoted Complex Placeholder |
| #8797 | Card Elements for WPBakery | 90 | 1 | 208 | 500 | | | Non-prefixed global variable |
| #8798 | Category Wise Search | 41 | 58 | 9 | 500 | | | Output is not escaped |
| #8799 | Certify – Certificate Management & Verification | 94 | 2 | 2 | 500 | | | Database parameter is not escaped |
| #8800 | Contact Form 7 extension for Google Map fields | 39 | 118 | 58 | 500 | | | Missing Arg Domain |
