| #3751 | BIP Pages | 39 | 98 | 25 | 400 | | | Short PHP open tag found |
| #3752 | Birds Custom Login | 39 | 196 | 23 | 4k+ | | | Non Singular String Literal Domain |
| #3753 | Blackhole for Bad Bots | 39 | 123 | 69 | 30k+ | | | Output is not escaped |
| #3754 | Block Editor Bootstrap Blocks | 39 | 173 | 50 | 900 | | | Text Domain Mismatch |
| #3755 | Blogger Importer Extended | 39 | 55 | 45 | 4k+ | | | Output is not escaped |
| #3756 | Bogo | 39 | 30 | 139 | 10k+ | | | Request data is not unslashed |
| #3757 | BOX NOW Delivery Croatia | 39 | 64 | 99 | 800 | | | Missing nonce verification |
| #3758 | BST DSGVO Cookie | 39 | 61 | 7 | 5k+ | | | Unsafe printing function |
| #3759 | BuddyPress Default Cover Photo | 39 | 62 | 39 | 500 | | | Output is not escaped |
| #3760 | BuddyPress Notification Widget | 39 | 54 | 31 | 600 | | | Output is not escaped |
| #3761 | BugSnag Error Monitoring plugin | 39 | 52 | 96 | 2k+ | | | wp function not compatible with requires wp |
| #3762 | Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) | 39 | 16 | 47 | 10k+ | | | Request data is not unslashed |
| #3763 | Bulk NoIndex & NoFollow Toolkit | 39 | 72 | 172 | 2k+ | | | Nonce verification recommended |
| #3764 | Better WordPress External Links | 39 | 130 | 35 | 400 | | | Non Singular String Literal Domain |
| #3765 | Cache Images | 39 | 72 | 27 | 1k+ | | | Unsafe printing function |
| #3766 | Calculator Builder – Create an Online Calculator | 39 | 16 | 221 | 1k+ | | | Non-prefixed global variable |
| #3767 | CatFolders Document Gallery & PDF Library | 39 | 66 | 32 | 3k+ | | | Output is not escaped |
| #3768 | Saitama Addon Pack | 39 | 152 | 27 | 1k+ | | | Output is not escaped |
| #3769 | Contact Form 7 extension for Google Map fields | 39 | 118 | 58 | 500 | | | Missing Arg Domain |
| #3770 | Innozilla Skins for Contact Form 7 | 39 | 152 | 22 | 2k+ | | | Output is not escaped |
| #3771 | Configurable Tag Cloud (CTC) | 39 | 126 | 121 | 2k+ | | | Output is not escaped |
| #3772 | Constant Contact + WooCommerce | 39 | 27 | 91 | 1k+ | | | Nonce verification recommended |
| #3773 | Contact Form 7 – Dynamic Text Extension | 39 | 103 | 28 | 100k+ | | | Output is not escaped |
| #3774 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 39 | 28 | 45 | 80k+ | | | Missing nonce verification |
| #3775 | Content Visibility for Divi Builder | 39 | 184 | 59 | 2k+ | | | Non Singular String Literal Domain |
| #3776 | Cookies for Comments | 39 | 22 | 29 | 20k+ | | | Input is not validated |
| #3777 | Country & Phone Field Contact Form 7 | 39 | 117 | 34 | 40k+ | | | Text Domain Mismatch |
| #3778 | Culqi | 39 | 571 | 88 | 1k+ | | | Text Domain Mismatch |
| #3779 | Custom Metadata Manager | 39 | 81 | 20 | 700 | | | Output is not escaped |
| #3780 | Custom Post Order | 39 | 14 | 32 | 400 | | | Input is not sanitized |
| #3781 | Custom Post Type Auto Menu | 39 | 54 | 33 | 500 | | | Text Domain Mismatch |
| #3782 | Custom Post Type Parents | 39 | 75 | 18 | 900 | | | Output is not escaped |
| #3783 | Custom Related Posts | 39 | 131 | 34 | 3k+ | | | Output is not escaped |
| #3784 | Custom Thank You for WooCommerce | 39 | 107 | 57 | 400 | | | Output is not escaped |
| #3785 | Da Reactions | 39 | 15 | 140 | 400 | | | Request data is not unslashed |
| #3786 | Dashboard Cleaner | 39 | 40 | 91 | 500 | | | Missing nonce verification |
| #3787 | Datalogics Ecommerce Delivery – Datalogics | 39 | 13 | 115 | 500 | | | Nonce verification recommended |
| #3788 | DefendWP Firewall | 39 | 16 | 203 | 3k+ | | | Non-prefixed global variable |
| #3789 | Deliverability – pass DKIM, SPF, DMARC & more | 39 | 21 | 71 | 800 | | | Nonce verification recommended |
| #3790 | Drip for Gravity Forms | 39 | 41 | 21 | 500 | | | Unsafe printing function |
| #3791 | Dublin Core Metadata Generator | 39 | 74 | 15 | 900 | | | Output is not escaped |
| #3792 | Duplicate Killer – Prevent Duplicate Form Submissions | 39 | 57 | 103 | 1k+ | | | Non-prefixed global variable |
| #3793 | WeShareAI – AI-Powered Share Buttons (formerly E-MAILiT) | 39 | 165 | 24 | 700 | | | Unsafe printing function |
| #3794 | Easy PayPal Events & Tickets | 39 | 28 | 550 | 1k+ | | | Request data is not unslashed |
| #3795 | Editor Menu and Widget Access | 39 | 81 | 24 | 7k+ | | | Output is not escaped |
| #3796 | Caldera Forms styler for Elementor Page Builder | 39 | 173 | 12 | 700 | | | Text Domain Mismatch |
| #3797 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor | 39 | 73 | 348 | 1m+ | | | Non-prefixed global variable |
| #3798 | Email Marketing by EmailOctopus | 39 | 43 | 62 | 3k+ | | | Non-prefixed global variable |
| #3799 | Enhanced Admin Bar with Codex Search | 39 | 64 | 3 | 1k+ | | | Missing Arg Domain |
| #3800 | Events Manager – Zoom Integration | 39 | 141 | 43 | 700 | | | Output is not escaped |