| #2351 | Block User Account | 35 | 280 | 143 | 1k+ | | | Unsafe printing function |
| #2352 | BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library | 35 | 56 | 16 | 10k+ | | | block api version too low |
| #2353 | Blocks for Eventbrite | 35 | 3 | 4 | 1k+ | | | Hidden files included |
| #2354 | Blogsqode – Blog Layouts and News Post Design | 35 | 430 | 63 | 400 | | | Text Domain Mismatch |
| #2355 | BlossomThemes Toolkit | 35 | 347 | 52 | 30k+ | | | Output is not escaped |
| #2356 | Bluehost Site Migrator | 35 | 11 | 18 | 4k+ | | | Missing direct file access protection |
| #2357 | Tooltipy (tooltips for WP) | 35 | 370 | 125 | 1k+ | | | Text Domain Mismatch |
| #2358 | bookingflow Smoobu for WP | 35 | 107 | 12 | 400 | | | Text Domain Mismatch |
| #2359 | Bootstrap for Contact Form 7 | 35 | 35 | 73 | 10k+ | | | Nonce verification recommended |
| #2360 | BORICA Payments by BORICA AD | 35 | 537 | 196 | 500 | | | Text Domain Mismatch |
| #2361 | BotWriter – AI Writer & SEO Content Generator | 35 | 16 | 504 | 3k+ | | | Direct Query |
| #2362 | BuddyPress Activity Filter | 35 | 25 | 66 | 400 | | | Nonce verification recommended |
| #2363 | Wbcom Designs – BuddyPress Activity Social Share | 35 | 293 | 27 | 400 | | | Text Domain Mismatch |
| #2364 | Custom Order Status Manager for WooCommerce | 35 | 630 | 67 | 30k+ | | | Text Domain Mismatch |
| #2365 | Registration Options for BuddyPress | 35 | 47 | 132 | 1k+ | | | Non-prefixed function |
| #2366 | Brightcove Video Connect | 35 | 580 | 235 | 600 | | | Text Domain Mismatch |
| #2367 | Brozzme DB Prefix & Tools Addons | 35 | 24 | 42 | 10k+ | | | Request data is not unslashed |
| #2368 | BSK Forms Blacklist | 35 | 831 | 550 | 1k+ | | | Output is not escaped |
| #2369 | BTCPay Server – Accept Bitcoin payments in WooCommerce | 35 | 48 | 86 | 1k+ | | | Missing nonce verification |
| #2370 | BugHerd | 35 | 8 | 2 | 3k+ | | | Output is not escaped |
| #2371 | Bulk Download for Gravity Forms | 35 | 5 | 2 | 500 | | | Hidden files included |
| #2372 | Bulk Page Stub Creator | 35 | 4 | 2 | 500 | | | Non-prefixed constant |
| #2373 | Business Hours Indicator | 35 | 139 | 106 | 8k+ | | | Alternative PHP tag found |
| #2374 | Buying Buddy IDX CRM – Real Estate MLS Plugin | 35 | 71 | 240 | 500 | | | Request data is not unslashed |
| #2375 | C3 Cloudfront Cache Controller | 35 | 109 | 60 | 3k+ | | | Non Singular String Literal Domain |
| #2376 | Cache Enabler | 35 | 44 | 75 | 90k+ | | | Input is not sanitized |
| #2377 | UseStrict's Calendly Embedder | 35 | 4 | 1 | 2k+ | | | Hidden files included |
| #2378 | Divi Carousel Lite – Responsive Carousel & Slider Modules for Divi Builder | 35 | 381 | 7 | 6k+ | | | Text Domain Mismatch |
| #2379 | CatFolders – WordPress Media Library Folders & Categories | 35 | 35 | 76 | 6k+ | | | Direct Query |
| #2380 | Central Connect | 35 | 7 | 21 | 400 | | | Nonce verification recommended |
| #2381 | CF7 Spreadsheets | 35 | 100 | 62 | 400 | | | Text Domain Mismatch |
| #2382 | CF7 Submissions – Securely Store Contact Form 7 Data and Attachments, Reply to the Sender and more | 35 | 16 | 119 | 2k+ | | | Non-prefixed global variable |
| #2383 | Popup for CF7 with Sweet Alert | 35 | 26 | 12 | 2k+ | | | Text Domain Mismatch |
| #2384 | CF7 Views – Complete Entry Management for Contact Form 7 | 35 | 172 | 181 | 1k+ | | | Output is not escaped |
| #2385 | Change Last Modified Date | 35 | 7 | 1 | 3k+ | | | Missing direct file access protection |
| #2386 | Change Quantity on Checkout for WooCommerce | 35 | 270 | 32 | 4k+ | | | wp function not compatible with requires wp |
| #2387 | Change Username | 35 | 7 | 10 | 4k+ | | | Direct Query |
| #2388 | ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form | 35 | 31 | 188 | 1k+ | | | Non-prefixed global variable |
| #2389 | Payment Gateway Based Fees and Discounts for WooCommerce | 35 | 24 | 68 | 30k+ | | | Non-prefixed hook name |
| #2390 | Child Pages Shortcode | 35 | 5 | 6 | 5k+ | | | Non-prefixed hook name |
| #2391 | CHP Ads Block Detector | 35 | 108 | 35 | 900 | | | Output is not escaped |
| #2392 | CiviCRM Admin Utilities | 35 | 19 | 87 | 1k+ | | | Non-prefixed hook name |
| #2393 | CiviCRM Profile Sync | 35 | 31 | 140 | 600 | | | Non-prefixed global variable |
| #2394 | Cloudflare | 35 | 28 | 85 | 200k+ | | | Non-prefixed namespace |
| #2395 | Flexible SSL for CloudFlare | 35 | 9 | 6 | 100k+ | | | Output is not escaped |
| #2396 | CM E-Mail Blacklist – Simple email filtering for safer registration | 35 | 269 | 205 | 800 | | | Output is not escaped |
| #2397 | Code Block Pro – Beautiful Syntax Highlighting | 35 | 7 | 4 | 10k+ | | | badly named files |
| #2398 | Code Prettify | 35 | 7 | 3 | 1k+ | | | wp function not compatible with requires wp |
| #2399 | CompressX — AVIF & WebP Converter, Media Replacement | 35 | 26 | 423 | 40k+ | | | Missing nonce verification |
| #2400 | Conditional Menus | 35 | 92 | 28 | 60k+ | | | Text Domain Mismatch |