| #7351 | Display Posts As List, Grid, Thumbs | 33 | 442 | 241 | 900 | | | Output is not escaped |
| #7352 | Unagi | 35 | 9 | 2 | 900 | | | Missing direct file access protection |
| #7353 | Unattach | 77 | 4 | 11 | 900 | | | Nonce verification recommended |
| #7354 | Unlimited Addons For Gutenberg Blocks | 59 | 16 | 68 | 900 | | | slow db query meta key |
| #7355 | Upcoming Events Lists | 40 | 75 | 17 | 900 | | | Text Domain Mismatch |
| #7356 | User Avatar – Reloaded | 30 | 352 | 171 | 900 | | | Text Domain Mismatch |
| #7357 | SX User Name Security | 46 | 42 | 9 | 900 | | | Output is not escaped |
| #7358 | Lime Connect (formerly Userlike) – WordPress Live Chat plugin | 65 | 22 | 3 | 900 | | | Output is not escaped |
| #7359 | UTM Event Tracker and Analytics, UTM Grabber | 76 | 2 | 19 | 900 | | | Interpolated SQL is not prepared |
| #7360 | VG WORT METIS | 28 | 150 | 317 | 900 | | | Nonce verification recommended |
| #7361 | TWIPLA (Visitor Analytics IO) – Privacy-First Website Stats, Session Recordings, Heatmaps, Polls and Surveys | 38 | 71 | 49 | 900 | | | Output is not escaped |
| #7362 | Visual Editor Biography | 79 | 11 | 3 | 900 | | | Missing Arg Domain |
| #7363 | VRTs – Visual Regression Tests | 58 | 61 | 118 | 900 | | | Database parameter is not escaped |
| #7364 | Visual Bible Verse of the Day Widget | 71 | 27 | 1 | 900 | | | Output is not escaped |
| #7365 | Waymark | 72 | 16 | 32 | 900 | | | Missing direct file access protection |
| #7366 | QCode – Departamentos y Ciudades de Colombia para Woocommerce | 94 | 8 | 11 | 900 | | | Non-prefixed global variable |
| #7367 | WC Moneris Payment Gateway | 56 | 82 | 20 | 900 | | | Text Domain Mismatch |
| #7368 | Order Tracker for WooCommerce – Track Customer Order | 99 | 1 | 1 | 900 | | | outdated tested upto header |
| #7369 | Payment Gateway Payoneer For WooCommerce | 51 | 9 | 35 | 900 | | | Input is not validated |
| #7370 | Shipping Packages for WooCommerce – Dropship from multiple locations like AliExpress, eBay, Amazon, Etsy | 38 | 94 | 26 | 900 | | | Non Singular String Literal Domain |
| #7371 | ShipStation Live Rates for WooCommerce | 35 | 402 | 73 | 900 | | | Non Singular String Literal Domain |
| #7372 | WDV About Me Widget | 38 | 150 | 8 | 900 | | | Output is not escaped |
| #7373 | Webmention | 33 | 64 | 89 | 900 | | | Output is not escaped |
| #7374 | Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring | 32 | 196 | 160 | 900 | | | Text Domain Mismatch |
| #7375 | Werk aan de Muur | 64 | 48 | 20 | 900 | | | Non Singular String Literal Domain |
| #7376 | What Would Seth Godin Do | 100 | | 0 | 900 | | | No open findings |
| #7377 | Widget Box Lite | 37 | 318 | 17 | 900 | | | Output is not escaped |
| #7378 | Widgets for Thumbtack Reviews | 96 | | 349 | 900 | | | Non-prefixed global variable |
| #7379 | WiserReview Product Reviews for WooCommerce | 68 | 21 | 110 | 900 | | | Non-prefixed global variable |
| #7380 | BjornTech Accounting Report for WooCommerce | 99 | 2 | 1 | 900 | | | wp function not compatible with requires wp |
| #7381 | Billingo Plus integráció WooCommerce-hez | 23 | 1,119 | 507 | 900 | | | Text Domain Mismatch |
| #7382 | Backend Payments for WooCommerce | 35 | 63 | 42 | 900 | | | Exception output is not escaped |
| #7383 | WPC Order Notes for WooCommerce | 54 | 20 | 25 | 900 | | | Output is not escaped |
| #7384 | Bulk Order Form for WooCommerce | 81 | 8 | 98 | 900 | | | Non-prefixed hook name |
| #7385 | Express, Certified Post, Bike Delivery and Iranian Postal Companies for WooCommerce | 99 | 1 | 2 | 900 | | | Non-prefixed function |
| #7386 | Woopra Analytics Plugin | 34 | 114 | 53 | 900 | | | Output is not escaped |
| #7387 | WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce | 24 | 761 | 1,612 | 900 | | | Non-prefixed global variable |
| #7388 | AI ChatBot for WooCommerce – WoowBot | 24 | 144 | 524 | 900 | | | Request data is not unslashed |
| #7389 | Commerce7 for WordPress | 91 | 2 | 93 | 900 | | | Non-prefixed global variable |
| #7390 | Content Pilot – Autoblogging & Affiliate Marketing Suite | 27 | 299 | 269 | 900 | | | Output is not escaped |
| #7391 | WP Core Update Cleaner | 98 | 1 | 5 | 900 | | | trademarked term |
| #7392 | Dobby | 97 | 3 | 2 | 900 | | | Dynamic hook name |
| #7393 | WP Forms Signature Contract Add-On | 35 | 127 | 35 | 900 | | | Text Domain Mismatch |
| #7394 | WP Geo | 35 | 180 | 84 | 900 | | | Output is not escaped |
| #7395 | WP jQuery Plus | 88 | 7 | 5 | 900 | | | trademarked term |
| #7396 | WP Mailgun SMTP | 38 | 99 | 51 | 900 | | | Text Domain Mismatch |
| #7397 | WP PDF Generator | 84 | 21 | 22 | 900 | | | Request data is not unslashed |
| #7398 | WP Prefix Changer | 47 | 27 | 16 | 900 | | | Missing Arg Domain |
| #7399 | WP Revision Master | 39 | 96 | 29 | 900 | | | Text Domain Mismatch |
| #7400 | Advanced All in One Admin Search by WP Spotlight | 42 | 25 | 25 | 900 | | | Missing Version |
