| #8051 | Upload Url and Path Enabler | 83 | 10 | 1 | 2k+ | | | Missing Arg Domain |
| #8052 | upPrev | 39 | 35 | 36 | 1k+ | | | Dynamic hook name |
| #8053 | Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. | 70 | 3 | 1,446 | 3k+ | | | Non-prefixed global variable |
| #8054 | UpStream: a Project Management Plugin for WordPress | 22 | 683 | 703 | 600 | | | Non-prefixed global variable |
| #8055 | Uptime Robot Plugin for WordPress | 35 | 398 | 324 | 600 | | | Text Domain Mismatch |
| #8056 | Uptolike Social Share Buttons | 39 | 38 | 33 | 4k+ | | | Output is not escaped |
| #8057 | URL Image Importer – Import External Images to the Media Library from URL, CSV & XML | 26 | 143 | 239 | 700 | | | Missing nonce verification |
| #8058 | URL Params | 46 | 36 | 17 | 8k+ | | | Text Domain Mismatch |
| #8059 | Url Rewrite Analyzer | 40 | 73 | 23 | 400 | | | Unsafe printing function |
| #8060 | URL ShortCodes | 97 | 4 | 1 | 2k+ | | | Missing direct file access protection |
| #8061 | Urvanov Syntax Highlighter | 30 | 221 | 87 | 3k+ | | | Output is not escaped |
| #8062 | UsageDD | 77 | 8 | 3 | 1k+ | | | Output is not escaped |
| #8063 | Welcart e-Commerce | 22 | 10,378 | 10,931 | 10k+ | | | Text Domain Mismatch |
| #8064 | Use Administrator Password | 93 | 2 | 4 | 800 | | | Non-prefixed hook name |
| #8065 | Use Google Libraries | 35 | 13 | 5 | 10k+ | | | Hidden files included |
| #8066 | Useful Blocks | 34 | 214 | 22 | 20k+ | | | Output is not escaped |
| #8067 | User Access Manager | 30 | 393 | 171 | 10k+ | | | Output is not escaped |
| #8068 | User Access Shortcodes | 92 | 3 | 1 | 1k+ | | | Missing direct file access protection |
| #8069 | User Activity Tracking and Log | 50 | 30 | 263 | 2k+ | | | Non-prefixed global variable |
| #8070 | User Avatar | 26 | 104 | 173 | 4k+ | | | Non-prefixed constant |
| #8071 | User Avatar – Reloaded | 30 | 352 | 171 | 900 | | | Text Domain Mismatch |
| #8072 | User Blocker | 39 | 6 | 276 | 3k+ | | | Nonce verification recommended |
| #8073 | Export Users With Meta | 70 | 13 | 13 | 2k+ | | | Direct Query |
| #8074 | User IP and Location | 88 | 2 | 10 | 3k+ | | | Input is not sanitized |
| #8075 | User Last Login | 65 | 27 | 5 | 600 | | | Output is not escaped |
| #8076 | User Location and IP | 70 | 2 | 25 | 400 | | | Input is not sanitized |
| #8077 | User Login History | 99 | 2 | 0 | 10k+ | | | Plugin Directory Write |
| #8078 | User Menus – Nav Menu Visibility | 23 | 531 | 1,298 | 80k+ | | | Non-prefixed global variable |
| #8079 | User Meta Display | 37 | 78 | 74 | 500 | | | Output is not escaped |
| #8080 | SX User Name Security | 46 | 42 | 9 | 900 | | | Output is not escaped |
| #8081 | User Notes | 100 | 1 | 0 | 800 | | | Missing Translators Comment |
| #8082 | User Photo | 35 | 112 | 68 | 3k+ | | | Output is not escaped |
| #8083 | Secure Client Portal and Private File Sharing Plugin – User Private Files | 32 | 183 | 525 | 1k+ | | | Non-prefixed global variable |
| #8084 | User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | 24 | 663 | 3,353 | 50k+ | | | Non-prefixed global variable |
| #8085 | User Registration Using Contact Form 7 | 32 | 103 | 15 | 500 | | | wp function not compatible with requires wp |
| #8086 | User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress | 30 | 486 | 278 | 3k+ | | | Text Domain Mismatch |
| #8087 | User role based shipping methods | 43 | 53 | 7 | 400 | | | Output is not escaped |
| #8088 | User Role Editor | 43 | 117 | 145 | 700k+ | | | Output is not escaped |
| #8089 | User Role for Flamingo | 89 | 2 | 4 | 700 | | | Non-prefixed function |
| #8090 | User Roles and Capabilities | 36 | 227 | 132 | 8k+ | | | Output is not escaped |
| #8091 | User Session Control | 43 | 31 | 21 | 700 | | | Output is not escaped |
| #8092 | User Shortcodes | 97 | 4 | 13 | 1k+ | | | Non-prefixed global variable |
| #8093 | User Spam Remover | 31 | 115 | 14 | 1k+ | | | Output is not escaped |
| #8094 | User Specific Content | 38 | 143 | 19 | 1k+ | | | Text Domain Mismatch |
| #8095 | User Submitted Posts – Enable Users to Submit Posts from the Front End | 26 | 699 | 396 | 10k+ | | | Text Domain Mismatch |
| #8096 | User Switching | 63 | 2 | 47 | 200k+ | | | Nonce verification recommended |
| #8097 | User Verification by PickPlugins | 29 | 41 | 314 | 5k+ | | | Request data is not unslashed |
| #8098 | Userback | 47 | 13 | 20 | 2k+ | | | Output is not escaped |
| #8099 | USERCENTRICS CMP | 56 | 44 | 11 | 1k+ | | | Non Singular String Literal Domain |
| #8100 | UserHeat Plugin | 39 | 121 | 20 | 6k+ | | | Non Singular String Literal Domain |