| #6751 | Ultra Companion – Companion plugin for WPoperation Themes | 34 | 73 | 116 | 1k+ | | | Missing direct file access protection |
| #6752 | Unconfirmed | 38 | 20 | 79 | 1k+ | | | Nonce verification recommended |
| #6753 | Under Construction Light | 73 | 13 | 8 | 1k+ | | | Text Domain Mismatch |
| #6754 | Product Options and Price Calculation Formulas for WooCommerce – Uni CPO | 23 | 2,514 | 1,929 | 1k+ | | | Output is not escaped |
| #6755 | UniConsent Cookie Consent CMP – Consent Manager | 42 | 148 | 18 | 1k+ | | | Unsafe printing function |
| #6756 | Unique Title Checker | 100 | 1 | 0 | 1k+ | | | Missing direct file access protection |
| #6757 | Unit Price for WooCommerce | 44 | 112 | 63 | 1k+ | | | Output is not escaped |
| #6758 | Universal Honey Pot | 40 | 23 | 94 | 1k+ | | | Missing nonce verification |
| #6759 | Unplug Jetpack | 98 | 4 | 0 | 1k+ | | | Missing direct file access protection |
| #6760 | PDF Flipbook, WPBakery Addon – Unreal FlipBook | 36 | 400 | 92 | 1k+ | | | Non Singular String Literal Domain |
| #6761 | UPI QR Code Payment Gateway | 42 | 179 | 28 | 1k+ | | | Text Domain Mismatch |
| #6762 | Upload SVG | 84 | 3 | 8 | 1k+ | | | Non-prefixed global variable |
| #6763 | upPrev | 39 | 35 | 36 | 1k+ | | | Dynamic hook name |
| #6764 | UsageDD | 77 | 8 | 3 | 1k+ | | | Output is not escaped |
| #6765 | User Access Shortcodes | 92 | 3 | 1 | 1k+ | | | Missing direct file access protection |
| #6766 | Secure Client Portal and Private File Sharing Plugin – User Private Files | 32 | 183 | 525 | 1k+ | | | Non-prefixed global variable |
| #6767 | User Shortcodes | 97 | 4 | 13 | 1k+ | | | Non-prefixed global variable |
| #6768 | User Spam Remover | 31 | 115 | 14 | 1k+ | | | Output is not escaped |
| #6769 | User Specific Content | 38 | 143 | 19 | 1k+ | | | Text Domain Mismatch |
| #6770 | USERCENTRICS CMP | 56 | 44 | 11 | 1k+ | | | Non Singular String Literal Domain |
| #6771 | Usermaven | 42 | 36 | 77 | 1k+ | | | Request data is not unslashed |
| #6772 | Users by Date Registered | 49 | 13 | 20 | 1k+ | | | Nonce verification recommended |
| #6773 | Unyson WooComerce Shortcodes | 82 | 117 | 11 | 1k+ | | | Text Domain Mismatch |
| #6774 | UX Flat | 30 | 539 | 203 | 1k+ | | | Missing Arg Domain |
| #6775 | VA Social Buzz | 83 | 13 | 2 | 1k+ | | | Output is not escaped |
| #6776 | ValidateCertify Free | 37 | 123 | 97 | 1k+ | | | Text Domain Mismatch |
| #6777 | VARGAL – Additional Variation Gallery for WooCommerce | 97 | 3 | 26 | 1k+ | | | Non-prefixed hook name |
| #6778 | Vayu Blocks – Website Builder for the Gutenberg Block Editor | 25 | 174 | 233 | 1k+ | | | Text Domain Mismatch |
| #6779 | Web and WooCommerce Addons for WPBakery Builder | 65 | 497 | 123 | 1k+ | | | Text Domain Mismatch |
| #6780 | WPBakery Page Builder Simple All Responsive | 88 | 4 | 6 | 1k+ | | | Missing direct file access protection |
| #6781 | Vendi Abandoned Plugin Check | 35 | 13 | 3 | 1k+ | | | trademarked term |
| #6782 | VenoBox Lightbox | 91 | 11 | 4 | 1k+ | | | Text Domain Mismatch |
| #6783 | Vf Expansion | 65 | 58 | 52 | 1k+ | | | Non-prefixed global variable |
| #6784 | Video Gallery Block | 99 | | 3 | 1k+ | | | Non-prefixed function |
| #6785 | FancyTube – Video Gallery, Video Slider, and Playlist Slider for YouTube | 38 | 358 | 34 | 1k+ | | | Text Domain Mismatch |
| #6786 | Video Grid | 35 | 253 | 106 | 1k+ | | | Output is not escaped |
| #6787 | Video Playlist for YouTube | 100 | | 2 | 1k+ | | | Non-prefixed constant |
| #6788 | Featured Video for WordPress – VideographyWP | 37 | 287 | 93 | 1k+ | | | Unsafe printing function |
| #6789 | VidShop – Shoppable Videos for WooCommerce | 38 | 54 | 153 | 1k+ | | | Database parameter is not escaped |
| #6790 | View User Metadata | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #6791 | Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend | 38 | 84 | 49 | 1k+ | | | Output is not escaped |
| #6792 | Views for WPForms – Display & Edit WPForms Entries on your site frontend | 37 | 80 | 64 | 1k+ | | | Output is not escaped |
| #6793 | VigIA – AI Visibility, Analytics & Control | 100 | | 0 | 1k+ | | | No open findings |
| #6794 | Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… | 100 | | 1 | 1k+ | | | mismatched plugin name |
| #6795 | Sovrn | 43 | 9 | 29 | 1k+ | | | Input is not sanitized |
| #6796 | VikWidgetsLoader – Collection of Widgets | 26 | 1,182 | 538 | 1k+ | | | Output is not escaped |
| #6797 | Virtuaria PagBank / PagSeguro for WooCommerce | 48 | 12 | 160 | 1k+ | | | Non-prefixed global variable |
| #6798 | Visibility Control for LearnDash | 40 | 55 | 23 | 1k+ | | | Missing Arg Domain |
| #6799 | Visitors Online by BestWebSoft | 26 | 512 | 269 | 1k+ | | | Text Domain Mismatch |
| #6800 | Visma Pay for Woocommerce | 40 | 27 | 37 | 1k+ | | | Output is not escaped |