| #1501 | Bellows Accordion Menu | 37 | 160 | 28 | 10k+ | | | Text Domain Mismatch |
| #1502 | Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces | 24 | 2,317 | 3,375 | 10k+ | | | slow db query meta key |
| #1503 | Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist | 93 | 2 | 4 | 10k+ | | | Missing Version |
| #1504 | Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder | 36 | 3 | 322 | 10k+ | | | Nonce verification recommended |
| #1505 | Blank Slate | 96 | 8 | 3 | 10k+ | | | Missing direct file access protection |
| #1506 | Elementor Blocks for Gutenberg | 80 | 7 | 6 | 10k+ | | | Output is not escaped |
| #1507 | BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library | 35 | 56 | 16 | 10k+ | | | block api version too low |
| #1508 | BlockSpare – Gutenberg Post Grid Blocks for News, Magazine & Blog Websites | 25 | 1,327 | 1,714 | 10k+ | | | Non-prefixed global variable |
| #1509 | Blog Designer | 59 | 62 | 83 | 10k+ | | | Text Domain Mismatch |
| #1510 | WP Custom Login | 99 | 1 | 2 | 10k+ | | | trademarked term |
| #1511 | Bogo | 39 | 30 | 139 | 10k+ | | | Request data is not unslashed |
| #1512 | Bold Timeline Lite | 71 | 220 | 561 | 10k+ | | | Non-prefixed global variable |
| #1513 | Booking Package | 25 | 1,697 | 3,977 | 10k+ | | | Missing nonce verification |
| #1514 | Bootstrap for Contact Form 7 | 35 | 35 | 73 | 10k+ | | | Nonce verification recommended |
| #1515 | Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots | 22 | 1,606 | 2,018 | 10k+ | | | Direct Query |
| #1516 | Breadcrumb – Breadcrumb for WooCommerce and Custom Post Types | 45 | 3 | 107 | 10k+ | | | Request data is not unslashed |
| #1517 | Breadcrumb Trail | 89 | 6 | 4 | 10k+ | | | Non-prefixed hook name |
| #1518 | Breadcrumbs Divi Module | 67 | 44 | 38 | 10k+ | | | Text Domain Mismatch |
| #1519 | Bricksable for Bricks Builder | 80 | 1 | 76 | 10k+ | | | Post Not In exclude |
| #1520 | Brozzme DB Prefix & Tools Addons | 35 | 24 | 42 | 10k+ | | | Request data is not unslashed |
| #1521 | Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) | 39 | 16 | 47 | 10k+ | | | Request data is not unslashed |
| #1522 | Bulk Page Creator | 62 | 9 | 17 | 10k+ | | | Request data is not unslashed |
| #1523 | Bulk Post Update Date | 36 | 96 | 66 | 10k+ | | | Unsafe printing function |
| #1524 | Bulk remove posts from category | 95 | 2 | 5 | 10k+ | | | date date |
| #1525 | Bulky – Bulk Edit Products for WooCommerce | 81 | 3 | 21 | 10k+ | | | Non-prefixed hook name |
| #1526 | bunny.net – WordPress CDN Plugin | 37 | 165 | 159 | 10k+ | | | Output is not escaped |
| #1527 | Burger Companion | 23 | 3,274 | 472 | 10k+ | | | Text Domain Mismatch |
| #1528 | Business Directory Plugin – Easy Listing Directories for WordPress | 23 | 611 | 1,063 | 10k+ | | | Non-prefixed global variable |
| #1529 | Button visually impaired | 44 | 145 | 5 | 10k+ | | | Text Domain Mismatch |
| #1530 | CallRail Phone Call Tracking | 69 | 11 | 12 | 10k+ | | | Input is not validated |
| #1531 | Canvas | 90 | 2 | 115 | 10k+ | | | Non-prefixed global variable |
| #1532 | Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms | 22 | 493 | 295 | 10k+ | | | Text Domain Mismatch |
| #1533 | SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce) | 25 | 235 | 214 | 10k+ | | | Database parameter is not escaped |
| #1534 | Catch Gallery | 82 | 1 | 35 | 10k+ | | | Non-prefixed hook name |
| #1535 | Catch Infinite Scroll | 87 | | 20 | 10k+ | | | Non-prefixed global variable |
| #1536 | Catch Web Tools | 100 | | 0 | 10k+ | | | No open findings |
| #1537 | CDN Enabler | 69 | 14 | 7 | 10k+ | | | Output is not escaped |
| #1538 | Simple SEO | 36 | 164 | 113 | 10k+ | | | Non Singular String Literal Domain |
| #1539 | AntiSpam for Contact Form 7 | 86 | 14 | 8 | 10k+ | | | Text Domain Mismatch |
| #1540 | Smart Grid-Layout Design for Contact Form 7 | 21 | 1,126 | 734 | 10k+ | | | Output is not escaped |
| #1541 | Multi Step for Contact Form 7 | 36 | 61 | 106 | 10k+ | | | Missing nonce verification |
| #1542 | Successful Redirection for Contact Form | 49 | 33 | 20 | 10k+ | | | Text Domain Mismatch |
| #1543 | Message Bridge for Contact Form 7 and Telegram | 100 | | 0 | 10k+ | | | No open findings |
| #1544 | Void Contact Form 7 Widget For Elementor Page Builder | 28 | 279 | 66 | 10k+ | | | Text Domain Mismatch |
| #1545 | Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More | 26 | 97 | 270 | 10k+ | | | error log error log |
| #1546 | Child Theme Wizard | 100 | | 0 | 10k+ | | | No open findings |
| #1547 | ClickCease Click Fraud Protection | 37 | 30 | 58 | 10k+ | | | Non-prefixed class |
| #1548 | Clicky Analytics | 33 | 166 | 92 | 10k+ | | | Output is not escaped |
| #1549 | Clone Posts | 98 | 5 | 5 | 10k+ | | | Missing Arg Domain |
| #1550 | CLP Varnish Cache | 46 | 15 | 58 | 10k+ | | | Non-prefixed global variable |