| #8101 | Easy Username Updater | 69 | 19 | 28 | 10k+ | | | Missing Arg Domain |
| #8102 | Users by Date Registered | 49 | 13 | 20 | 1k+ | | | Nonce verification recommended |
| #8103 | Export and Import Users and Customers | 68 | 223 | 662 | 60k+ | | | Non-prefixed global variable |
| #8104 | User Profile Picture | 66 | 9 | 8 | 4k+ | | | Missing nonce verification |
| #8105 | Users Registration Date | 98 | 3 | 0 | 2k+ | | | Missing direct file access protection |
| #8106 | Usersnap | 41 | 37 | 17 | 500 | | | Output is not escaped |
| #8107 | UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP | 23 | 694 | 2,439 | 20k+ | | | Non-prefixed hook name |
| #8108 | UsersWP – ReCaptcha | 40 | 80 | 17 | 3k+ | | | Text Domain Mismatch |
| #8109 | UsersWP – Social Login | 37 | 299 | 91 | 2k+ | | | Text Domain Mismatch |
| #8110 | Accessibility by UserWay | 39 | 22 | 35 | 80k+ | | | Direct Query |
| #8111 | Ultra Addons Lite for Elementor | 84 | 30 | 18 | 700 | | | wp function not compatible with requires wp |
| #8112 | utm.codes | 43 | 34 | 33 | 400 | | | Missing nonce verification |
| #8113 | UTM Event Tracker and Analytics, UTM Grabber | 76 | 2 | 19 | 900 | | | Interpolated SQL is not prepared |
| #8114 | UTM for Woocommerce | 35 | 14 | 4 | 800 | | | Output is not escaped |
| #8115 | UTM Leads Tracker – XLPlugins | 40 | 21 | 38 | 400 | | | Output is not escaped |
| #8116 | UTMs Carry Pages | 84 | 4 | 11 | 400 | | | Non-prefixed global variable |
| #8117 | Unyson WooComerce Shortcodes | 82 | 117 | 11 | 1k+ | | | Text Domain Mismatch |
| #8118 | UX Flat | 30 | 539 | 203 | 1k+ | | | Missing Arg Domain |
| #8119 | VA Simple Expires | 43 | 25 | 31 | 800 | | | Output is not escaped |
| #8120 | VA Social Buzz | 83 | 13 | 2 | 1k+ | | | Output is not escaped |
| #8121 | ValidateCertify Free | 37 | 123 | 97 | 1k+ | | | Text Domain Mismatch |
| #8122 | Validated | 91 | 7 | 3 | 600 | | | Missing direct file access protection |
| #8123 | Vanilla PDF Embed | 85 | 8 | 3 | 3k+ | | | parse url parse url |
| #8124 | VARGAL – Additional Variation Gallery for WooCommerce | 97 | 3 | 26 | 1k+ | | | Non-prefixed hook name |
| #8125 | Duplicate Variations for WooCommerce | 84 | 6 | 12 | 2k+ | | | Non-prefixed global variable |
| #8126 | Variation Price Display Range for WooCommerce | 100 | | 0 | 10k+ | | | No open findings |
| #8127 | Variation Swatches for WooCommerce | 33 | 469 | 116 | 50k+ | | | Text Domain Mismatch |
| #8128 | Smart Variation Swatches and Attribute Filters for WooCommerce | 39 | 39 | 50 | 3k+ | | | Output is not escaped |
| #8129 | Variation Swatches for WooCommerce – Color, Image & Size Swatches | 86 | 2 | 17 | 200k+ | | | Request data is not unslashed |
| #8130 | Proxy Cache Purge | 97 | | 44 | 40k+ | | | Non-prefixed hook name |
| #8131 | Vast Demo Import | 42 | 180 | 113 | 600 | | | Text Domain Mismatch |
| #8132 | Jetpack VaultPress | 28 | 71 | 362 | 10k+ | | | Missing nonce verification |
| #8133 | Vayu Blocks – Website Builder for the Gutenberg Block Editor | 25 | 174 | 233 | 1k+ | | | Text Domain Mismatch |
| #8134 | Vazir Font | 96 | 6 | 1 | 700 | | | Missing Version |
| #8135 | Web and WooCommerce Addons for WPBakery Builder | 65 | 497 | 123 | 1k+ | | | Text Domain Mismatch |
| #8136 | Visual Composer Templates Library | 94 | 25 | 11 | 600 | | | Missing direct file access protection |
| #8137 | Image Hotspot With Tooltip For WPBakery Page Builder (formerly Visual Composer) | 92 | 61 | 12 | 400 | | | Text Domain Mismatch |
| #8138 | WPBakery Page Builder Simple All Responsive | 88 | 4 | 6 | 1k+ | | | Missing direct file access protection |
| #8139 | Export & Import WPBakery Page Builder | 56 | 12 | 20 | 9k+ | | | Missing nonce verification |
| #8140 | Varnish/Nginx Proxy Caching | 37 | 287 | 36 | 600 | | | Output is not escaped |
| #8141 | VdoCipher: Secure Video Player and Hosting | 38 | 37 | 54 | 2k+ | | | Non-prefixed function |
| #8142 | Veeqo for WooCommerce | 50 | 30 | 17 | 700 | | | Missing direct file access protection |
| #8143 | Vello Booking Calendar | 74 | 10 | 2 | 500 | | | Unsafe printing function |
| #8144 | Vendi Abandoned Plugin Check | 35 | 13 | 3 | 1k+ | | | trademarked term |
| #8145 | VenoBox Lightbox | 91 | 11 | 4 | 1k+ | | | Text Domain Mismatch |
| #8146 | VenoMaps – OpenStreetMap & Privacy-Friendly Geo Maps | 86 | 20 | 6 | 400 | | | wp function not compatible with requires wp |
| #8147 | Verge3D Publishing and E-Commerce | 27 | 245 | 298 | 400 | | | Nonce verification recommended |
| #8148 | Verify domain for Apple Pay with Stripe | 92 | 3 | 2 | 600 | | | Input is not sanitized |
| #8149 | Version Control for jQuery | 92 | 5 | 1 | 6k+ | | | Offloaded Content |
| #8150 | Version Info – Server Health Monitor, PHP & MySQL Version Display, Environment Indicators | 93 | | 13 | 10k+ | | | Request data is not unslashed |