| #6301 | Universal Google Adsense and Ads manager | 39 | 70 | 31 | 2k+ | | | Unsafe printing function |
| #6302 | Unlimited Background Slider | 39 | 66 | 53 | 600 | | | Output is not escaped |
| #6303 | upPrev | 39 | 35 | 36 | 1k+ | | | Dynamic hook name |
| #6304 | Uptolike Social Share Buttons | 39 | 38 | 33 | 4k+ | | | Output is not escaped |
| #6305 | Use Any Font | Custom Font Uploader | 39 | 36 | 55 | 200k+ | | | Request data is not unslashed |
| #6306 | User Blocker | 39 | 6 | 276 | 3k+ | | | Nonce verification recommended |
| #6307 | UserHeat Plugin | 39 | 121 | 20 | 6k+ | | | Non Singular String Literal Domain |
| #6308 | Accessibility by UserWay | 39 | 22 | 35 | 80k+ | | | Direct Query |
| #6309 | Smart Variation Swatches and Attribute Filters for WooCommerce | 39 | 39 | 50 | 3k+ | | | Output is not escaped |
| #6310 | Video Blogster Lite | 39 | 29 | 80 | 700 | | | Missing nonce verification |
| #6311 | Virtuaria Correios – Frete, Etiqueta, Rastreio e Declaração | 39 | 18 | 81 | 500 | | | Nonce verification recommended |
| #6312 | Virusdie | One-click website security | 39 | 149 | 66 | 2k+ | | | Output is not escaped |
| #6313 | Visual Portfolio, Photo Gallery & Post Grid | 39 | 34 | 189 | 60k+ | | | Non-prefixed hook name |
| #6314 | BeGateway Payment Gateway for WooCommerce | 39 | 57 | 44 | 400 | | | Unsafe printing function |
| #6315 | Payments via PayMongo for WooCommerce | 39 | 36 | 81 | 1k+ | | | Nonce verification recommended |
| #6316 | Smart COD for WooCommerce | 39 | 50 | 28 | 30k+ | | | Output is not escaped |
| #6317 | WebHotelier for WordPress | 39 | 451 | 40 | 500 | | | Text Domain Mismatch |
| #6318 | Website LLMs.txt | 39 | 13 | 149 | 40k+ | | | Non-prefixed global variable |
| #6319 | Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types | 39 | 89 | 117 | 20k+ | | | Unsafe printing function |
| #6320 | Payment Gateway – nexi Alpha Bank for WooCommerce | 39 | 96 | 40 | 1k+ | | | Non Singular String Literal Domain |
| #6321 | Woo Button Text | 39 | 53 | 21 | 500 | | | Output is not escaped |
| #6322 | Combo Offers WooCommerce | 39 | 38 | 89 | 2k+ | | | Missing nonce verification |
| #6323 | Lucky Wheel for WooCommerce – Spin a Sale | 39 | 12 | 153 | 1k+ | | | Request data is not unslashed |
| #6324 | CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x | 39 | 7 | 222 | 20k+ | | | Non-prefixed hook name |
| #6325 | PayU GPO Payment for WooCommerce | 39 | 44 | 91 | 10k+ | | | Output is not escaped |
| #6326 | Skroutz & Bestprice XML feed for WooCommerce | 39 | 135 | 3 | 1k+ | | | Output is not escaped |
| #6327 | Modal Fly Cart & AJAX Add to Cart for WooCommerce | 39 | 83 | 74 | 2k+ | | | Text Domain Mismatch |
| #6328 | Claudio Sanches – PagSeguro for WooCommerce | 39 | 87 | 37 | 10k+ | | | Unsafe printing function |
| #6329 | WooCommerce Product Dependencies | 39 | 44 | 60 | 3k+ | | | Missing nonce verification |
| #6330 | Store Toolkit – WooCommerce Extensions, Quick Enhancements & Handy Tools | 39 | 322 | 66 | 8k+ | | | Output is not escaped |
| #6331 | WP Accessibility | 39 | 200 | 104 | 60k+ | | | Unsafe printing function |
| #6332 | WP Add Custom CSS | 39 | 45 | 23 | 60k+ | | | Output is not escaped |
| #6333 | Aparat for WordPress | 39 | 59 | 14 | 3k+ | | | Output is not escaped |
| #6334 | WP Attachments | 39 | 49 | 44 | 3k+ | | | Output is not escaped |
| #6335 | WP-Cycle | 39 | 53 | 17 | 3k+ | | | Output is not escaped |
| #6336 | WPEPP – Essential Security, Password Protect & Login Page Customizer | 39 | 34 | 29 | 3k+ | | | Unsupported Identifier Placeholder |
| #6337 | WP Gmail SMTP | 39 | 99 | 50 | 1k+ | | | Text Domain Mismatch |
| #6338 | WP Limit Login Attempts | 39 | 26 | 67 | 10k+ | | | Direct Query |
| #6339 | WP Most Popular | 39 | 50 | 35 | 2k+ | | | Output is not escaped |
| #6340 | WP Multibyte Patch | 39 | 24 | 55 | 1m+ | | | Input is not sanitized |
| #6341 | WP Performance Score Booster – Optimize Speed, Enable Cache & Page Preload | 39 | 59 | 27 | 10k+ | | | Unsafe printing function |
| #6342 | WP Realtime Sitemap | 39 | 46 | 41 | 10k+ | | | Output is not escaped |
| #6343 | WP Revision Master | 39 | 96 | 29 | 900 | | | Text Domain Mismatch |
| #6344 | WP SendGrid SMTP | 39 | 99 | 50 | 1k+ | | | Text Domain Mismatch |
| #6345 | WP Server Health Stats | 39 | 66 | 31 | 10k+ | | | Output is not escaped |
| #6346 | WP Sitemap Control | 39 | 31 | 37 | 400 | | | Output is not escaped |
| #6347 | WP Sitemaps Config | 39 | 88 | 37 | 700 | | | Output is not escaped |
| #6348 | WP-Slimbox2 Plugin | 39 | 77 | 19 | 3k+ | | | Unsafe printing function |
| #6349 | WP Social Widget | 39 | 239 | 7 | 4k+ | | | Output is not escaped |
| #6350 | AidWP – Donation & Payment Forms (Stripe Powered) | 39 | | 193 | 800 | | | Non-prefixed global variable |