| #9501 | WP Updates Settings | 79 | 7 | 8 | 900 | | | Unsafe printing function |
| #9502 | WP Upload Restriction | 86 | 59 | 16 | 2k+ | | | Text Domain Mismatch |
| #9503 | WP Upload Size | 77 | 6 | 14 | 2k+ | | | Non-prefixed function |
| #9504 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | 24 | 2,581 | 2,109 | 100k+ | | | Output is not escaped |
| #9505 | WP User Avatars | 68 | 5 | 20 | 20k+ | | | Input is not sanitized |
| #9506 | User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration | 22 | 287 | 1,432 | 20k+ | | | Non-prefixed global variable |
| #9507 | WP User Groups | 49 | 44 | 32 | 600 | | | Missing Translators Comment |
| #9508 | User Login Notifier for WordPress | 41 | 72 | 26 | 1k+ | | | Output is not escaped |
| #9509 | WP User Manager – User Profile Builder & Membership | 24 | 787 | 539 | 10k+ | | | Exception output is not escaped |
| #9510 | WP User Profile Restriction | 47 | 26 | 8 | 400 | | | Output is not escaped |
| #9511 | WP User Switch | 53 | 8 | 46 | 1k+ | | | Input is not sanitized |
| #9512 | WP-UserOnline | 33 | 111 | 161 | 10k+ | | | Output is not escaped |
| #9513 | Disable User Login | 89 | 1 | 20 | 500 | | | Direct Query |
| #9514 | WP-UTF8-Excerpt | 61 | 17 | 10 | 700 | | | Unsafe printing function |
| #9515 | Vertical Image Slider | 34 | 264 | 138 | 1k+ | | | Output is not escaped |
| #9516 | WP Video Lightbox | 38 | 107 | 67 | 30k+ | | | Unsafe printing function |
| #9517 | Live Visitor Counter | 34 | 108 | 114 | 4k+ | | | Interpolated SQL is not prepared |
| #9518 | WP Voting Contest Lite | 24 | 259 | 258 | 400 | | | Text Domain Mismatch |
| #9519 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | | | Exception output is not escaped |
| #9520 | WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress | 23 | 4,376 | 890 | 20k+ | | | Output is not escaped |
| #9521 | WebinarPress – Webinar System for WordPress | 54 | 61 | 499 | 900 | | | Non-prefixed global variable |
| #9522 | WP Weixin | 32 | 60 | 152 | 400 | | | Non-prefixed constant |
| #9523 | WP Chat App | 27 | 120 | 274 | 100k+ | | | Alternative PHP tag found |
| #9524 | Social Chat – Click To Chat App Button | 56 | 81 | 45 | 200k+ | | | Text Domain Mismatch |
| #9525 | WhyDonate – FREE Donate button – Crowdfunding – Fundraising | 28 | 216 | 328 | 800 | | | Non-prefixed global variable |
| #9526 | WP Widget Clipboard – Duplicate widgets intuitively | 42 | 51 | 19 | 800 | | | Output is not escaped |
| #9527 | Widget Disable | 46 | 19 | 19 | 10k+ | | | Output is not escaped |
| #9528 | WP Widget in Navigation | 71 | 37 | 15 | 3k+ | | | Non Singular String Literal Domain |
| #9529 | WordPress Widgets Shortcode | 89 | 5 | 4 | 500 | | | trademarked term |
| #9530 | Social Share For WooCommerce | 76 | 85 | 23 | 500 | | | Text Domain Mismatch |
| #9531 | Integration for WooCommerce and QuickBooks | 35 | 263 | 125 | 1k+ | | | Output is not escaped |
| #9532 | Worthy – VG WORT Integration für WordPress | 27 | 1,343 | 773 | 1k+ | | | Output is not escaped |
| #9533 | WP Wrapper | 57 | 13 | 29 | 600 | | | Input is not validated |
| #9534 | Yandex.Metrica | 36 | 76 | 30 | 60k+ | | | Output is not escaped |
| #9535 | WP Yelp Review Slider | 25 | 429 | 645 | 1k+ | | | Non-prefixed global variable |
| #9536 | WP-Yomigana | 35 | 17 | 15 | 2k+ | | | Output is not escaped |
| #9537 | WP YouTube Live | 86 | 28 | 24 | 1k+ | | | Non-prefixed function |
| #9538 | WP YouTube Lyte | 28 | 204 | 178 | 20k+ | | | Non-prefixed global variable |
| #9539 | WP YouTube Player | 61 | 14 | 17 | 1k+ | | | Output is not escaped |
| #9540 | WP101 Video Tutorial Plugin | 86 | 15 | 18 | 10k+ | | | Missing direct file access protection |
| #9541 | WP125 | 31 | 178 | 184 | 3k+ | | | Unsafe printing function |
| #9542 | SEO Auto Linker | 39 | 97 | 62 | 3k+ | | | Unsafe printing function |
| #9543 | WPA WooCommerce Product Gallery Slider Lite | 77 | 66 | 52 | 400 | | | Text Domain Mismatch |
| #9544 | WP AdCenter – Ad Manager & Adsense Ads | 76 | 5 | 71 | 1k+ | | | Direct Query |
| #9545 | WPAdverts – Classifieds Plugin | 24 | 1,308 | 496 | 4k+ | | | Output is not escaped |
| #9546 | WPMobile.App | 23 | 2,983 | 1,533 | 3k+ | | | Output is not escaped |
| #9547 | WPArtisan Filename Sanitizer | 97 | 2 | 5 | 400 | | | trademarked term |
| #9548 | wpautop control | 84 | 7 | 5 | 1k+ | | | trademarked term |
| #9549 | WPAvatar | 36 | 425 | 45 | 700 | | | Unsafe printing function |
| #9550 | Wpazure Kit | 44 | 136 | 140 | 800 | | | Missing direct file access protection |