| #3751 | Before + After Images for Divi | 97 | 12 | 3 | 3k+ | | | Missing direct file access protection |
| #3752 | Better Admin Bar | 54 | 27 | 63 | 3k+ | | | Non-prefixed global variable |
| #3753 | Better Business Reviews – Trustpilot WordPress Plugin | 85 | 4 | 7 | 3k+ | | | Output is not escaped |
| #3754 | Better Post & Filter Widgets for Elementor | 84 | 7 | 27 | 3k+ | | | slow db query tax query |
| #3755 | Bible Verse of the Day | 38 | 378 | 23 | 3k+ | | | Unsafe printing function |
| #3756 | Billingo Official for WooCommerce | 40 | 25 | 37 | 3k+ | | | Output is not escaped |
| #3757 | Block Editor Colors | 88 | 23 | 9 | 3k+ | | | Missing Arg Domain |
| #3758 | Gutenberg Block for WooCommerce Product Table | 35 | 14 | 4 | 3k+ | | | Hidden files included |
| #3759 | Block Navigation | 99 | 1 | 0 | 3k+ | | | outdated tested upto header |
| #3760 | Block Slider – Responsive Image Slider, Video Slider & Post Slider | 19 | 555 | 1,291 | 3k+ | | | Non-prefixed global variable |
| #3761 | ShopEngine Gutenberg WooCommerce Builder Blocks Addon – All in One WooCommerce Solution | 80 | 424 | 735 | 3k+ | | | Non-prefixed global variable |
| #3762 | Blogger To WordPress | 94 | 15 | 4 | 3k+ | | | Missing direct file access protection |
| #3763 | Booking Activities | 25 | 1,036 | 1,469 | 3k+ | | | Output is not escaped |
| #3764 | Booking calendar, Appointment Booking System | 23 | 1,079 | 1,125 | 3k+ | | | Output is not escaped |
| #3765 | Pinpoint Booking System – Version 2 | 21 | 634 | 328 | 3k+ | | | Missing direct file access protection |
| #3766 | BotBlocker Security – Firewall & Bot Protection | 99 | | 5 | 3k+ | | | Non-prefixed constant |
| #3767 | BotWriter – AI Writer & SEO Content Generator | 35 | 16 | 504 | 3k+ | | | Direct Query |
| #3768 | Verified Member for BuddyPress | 47 | 20 | 38 | 3k+ | | | Nonce verification recommended |
| #3769 | Breadcrumb Block | 100 | | 0 | 3k+ | | | No open findings |
| #3770 | Browser Screenshots | 86 | 15 | 3 | 3k+ | | | wp function not compatible with requires wp |
| #3771 | BugHerd | 35 | 8 | 2 | 3k+ | | | Output is not escaped |
| #3772 | Bulglish Permalinks | 98 | 3 | 1 | 3k+ | | | Missing direct file access protection |
| #3773 | C3 Cloudfront Cache Controller | 35 | 109 | 60 | 3k+ | | | Non Singular String Literal Domain |
| #3774 | CallTrackingMetrics | 21 | 923 | 286 | 3k+ | | | Unsafe printing function |
| #3775 | Captcha by Yandex for Contact Form 7 | 88 | 9 | 12 | 3k+ | | | Text Domain Mismatch |
| #3776 | Carbon Copy | 41 | 64 | 89 | 3k+ | | | Text Domain Mismatch |
| #3777 | Card Elements for Elementor | 67 | 15 | 116 | 3k+ | | | Non-prefixed global variable |
| #3778 | Category Sticky Post | 63 | 4 | 24 | 3k+ | | | Missing nonce verification |
| #3779 | CatFolders Document Gallery & PDF Library | 39 | 66 | 32 | 3k+ | | | Output is not escaped |
| #3780 | CCAvenue Payment Gateway for WooCommerce | 42 | 53 | 40 | 3k+ | | | Text Domain Mismatch |
| #3781 | Cecabank WooCommerce Plugin | 38 | 63 | 32 | 3k+ | | | Text Domain Mismatch |
| #3782 | Add Password Field for Contact Form 7 | 100 | | 0 | 3k+ | | | No open findings |
| #3783 | Email addon for CF7 | 100 | | 1 | 3k+ | | | Discouraged text-domain loading |
| #3784 | Popups – Submission Messages For Contact Form 7 | 85 | 2 | 7 | 3k+ | | | Input is not sanitized |
| #3785 | Contact Form 7 – Post Fields | 38 | 167 | 25 | 3k+ | | | Text Domain Mismatch |
| #3786 | WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms | 24 | 534 | 1,559 | 3k+ | | | Non-prefixed global variable |
| #3787 | WP Zoho for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms – CRM, Bigin | 27 | 692 | 381 | 3k+ | | | Text Domain Mismatch |
| #3788 | cformsII | 31 | 777 | 536 | 3k+ | | | Unsafe printing function |
| #3789 | Change Last Modified Date | 35 | 7 | 1 | 3k+ | | | Missing direct file access protection |
| #3790 | Change Price Title for WooCommerce | 98 | 2 | 1 | 3k+ | | | outdated tested upto header |
| #3791 | Chartify – WordPress Chart Plugin | 33 | 76 | 411 | 3k+ | | | Non-prefixed global variable |
| #3792 | Chatra Live Chat + ChatBot + Cart Saver | 79 | 11 | 1 | 3k+ | | | Output is not escaped |
| #3793 | Checkout Countdown for WooCommerce – Boost Conversions & Reduce Cart Abandonment | 62 | 43 | 12 | 3k+ | | | Output is not escaped |
| #3794 | CheckoutWC Lite – Conversion optimized WooCommerce checkout | 25 | 1,416 | 854 | 3k+ | | | Text Domain Mismatch |
| #3795 | CJdropshipping | 89 | 4 | 2 | 3k+ | | | Missing Arg Domain |
| #3796 | Classic Addons – WPBakery Page Builder | 30 | 1,245 | 263 | 3k+ | | | Text Domain Mismatch |
| #3797 | Client Portal – Private user pages and login | 40 | 52 | 29 | 3k+ | | | Output is not escaped |
| #3798 | CodePeople Post Map for Google Maps | 37 | 257 | 31 | 3k+ | | | Unsafe printing function |
| #3799 | Collapsing Archives | 64 | 36 | 9 | 3k+ | | | date date |
| #3800 | Columns | 99 | 2 | 1 | 3k+ | | | Missing Version |