| #9401 | AADMY – Add Auto Date Month Year Into Posts | 73 | 30 | 32 | 400 | | | Non-prefixed function |
| #9402 | Auto Image Title & Alt | 68 | 13 | 4 | 400 | | | Missing direct file access protection |
| #9403 | Avif Express | 35 | 26 | 167 | 400 | | | Input is not validated |
| #9404 | AWEOS WP Lock | 39 | 24 | 53 | 400 | | | Output is not escaped |
| #9405 | AweSplash – Just Splash Page | 42 | 39 | 34 | 400 | | | Output is not escaped |
| #9406 | WPAdmin AWS CDN | 66 | 161 | 42 | 400 | | | Text Domain Mismatch |
| #9407 | AI ChatBot with ChatGPT and Content Generator by AYS | 31 | 170 | 378 | 400 | | | Non-prefixed global variable |
| #9408 | Bangla Fonts Collection | 50 | 47 | 3 | 400 | | | Text Domain Mismatch |
| #9409 | Bestfreebie Elementor Icons | 73 | 27 | 13 | 400 | | | Text Domain Mismatch |
| #9410 | Better Blockquotes | 98 | 1 | 2 | 400 | | | Non-prefixed hook name |
| #9411 | BIP Pages | 39 | 98 | 25 | 400 | | | Short PHP open tag found |
| #9412 | Wbcom Designs – Birthday Widget for BuddyPress | 84 | 163 | 13 | 400 | | | Text Domain Mismatch |
| #9413 | Block Archive.org via WordPress robots.txt | 72 | 9 | 8 | 400 | | | Output is not escaped |
| #9414 | Contact Form 7 – Blacklist Unwanted Email | 62 | 16 | 11 | 400 | | | Missing direct file access protection |
| #9415 | Block Permissions | 91 | 7 | 1 | 400 | | | Non Singular String Literal Domain |
| #9416 | Blocks for Products | 79 | 18 | 13 | 400 | | | Non Singular String Literal Domain |
| #9417 | Blogify-AI | 88 | 6 | 12 | 400 | | | Non-prefixed global variable |
| #9418 | Blog News Addons For Elementor (News, Magazine and Blog Addons) | 37 | 23 | 296 | 400 | | | Non-prefixed global variable |
| #9419 | Blogsqode – Blog Layouts and News Post Design | 35 | 430 | 63 | 400 | | | Text Domain Mismatch |
| #9420 | Post Blocks & Tools | 60 | 9 | 46 | 400 | | | Missing nonce verification |
| #9421 | Booking System Trafft | 78 | 3 | 19 | 400 | | | Nonce verification recommended |
| #9422 | Booking Ultra Pro Appointments Booking Calendar Plugin | 21 | 761 | 2,083 | 400 | | | Request data is not unslashed |
| #9423 | bookingflow Smoobu for WP | 35 | 107 | 12 | 400 | | | Text Domain Mismatch |
| #9424 | BuddyPress Activity Filter | 35 | 25 | 66 | 400 | | | Nonce verification recommended |
| #9425 | Wbcom Designs – BuddyPress Activity Social Share | 35 | 293 | 27 | 400 | | | Text Domain Mismatch |
| #9426 | Custom Profile Menu for BuddyPress | 77 | 8 | 4 | 400 | | | Output is not escaped |
| #9427 | BuddyPress Default Data | 71 | 8 | 21 | 400 | | | Interpolated SQL is not prepared |
| #9428 | BtW Importer – Free Blogger/Blogspot Migration | 97 | | 2 | 400 | | | Database parameter is not escaped |
| #9429 | BuddyPress & BuddyBoss Member Profile Forms | 34 | 154 | 121 | 400 | | | Text Domain Mismatch |
| #9430 | BuddyPress Groups Extras | 50 | 30 | 51 | 400 | | | Missing direct file access protection |
| #9431 | Bulk Term Editor | 72 | 19 | 9 | 400 | | | Output is not escaped |
| #9432 | Quantity Discounts, Breaks & Product Bundles for Woocommerce By Bundler | 32 | 147 | 319 | 400 | | | Direct Query |
| #9433 | Buy one Get one Free – BOGO discount rule maker for WooCommerce | 40 | 119 | 57 | 400 | | | Text Domain Mismatch |
| #9434 | BWD Elementor Addons | 21 | 670 | 1,168 | 400 | | | Non-prefixed global variable |
| #9435 | Better WordPress External Links | 39 | 130 | 35 | 400 | | | Non Singular String Literal Domain |
| #9436 | Delivery Date Time & Pickup for WooCommerce | 37 | 148 | 216 | 400 | | | Output is not escaped |
| #9437 | Cache Buster | 84 | 5 | 6 | 400 | | | Input is not sanitized |
| #9438 | Cache Master | 34 | 371 | 27 | 400 | | | Output is not escaped |
| #9439 | Cache Using Gzip | 100 | | 0 | 400 | | | No open findings |
| #9440 | Despacho vía Starken Pro para WooCommerce | 44 | 175 | 60 | 400 | | | Text Domain Mismatch |
| #9441 | Callout | 98 | 3 | 1 | 400 | | | Missing direct file access protection |
| #9442 | Canonical SEO Content Syndication WordPress Plugin | 77 | 4 | 8 | 400 | | | Missing nonce verification |
| #9443 | Car Route Planner Plugin | 38 | 135 | 17 | 400 | | | Output is not escaped |
| #9444 | SMS Abandoned Cart Recovery ✦ CartBoss | 34 | 67 | 72 | 400 | | | SQL query is not prepared |
| #9445 | Category Featured Images Extended | 40 | 177 | 40 | 400 | | | Text Domain Mismatch |
| #9446 | Central Connect | 35 | 7 | 21 | 400 | | | Nonce verification recommended |
| #9447 | Čeština pro WordPress | 77 | 16 | 4 | 400 | | | Output is not escaped |
| #9448 | Ceylon Demo Installer | 81 | 11 | 9 | 400 | | | Non-prefixed function |
| #9449 | Contact Form 7 – email body TinyMCE editor | 91 | 4 | 6 | 400 | | | Nonce verification recommended |
| #9450 | SMS Extension for Contact Form 7 | 21 | 720 | 1,387 | 400 | | | Non-prefixed global variable |