| #1 | Simply Schedule Appointments | 100 | | 0 | 60k+ | | | No open findings |
| #2 | Cal.com | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #3 | Timetics – Appointment Booking Calendar & Scheduling | 89 | 6 | 5 | 2k+ | | | wp function not compatible with requires wp |
| #4 | WPS Bookings for WooCommerce | 88 | 26 | 249 | 3k+ | | | Non-prefixed global variable |
| #5 | Booktics – Appointment Booking Calendar for Service Businesses | 86 | 32 | 8 | 700 | | | wp function not compatible with requires wp |
| #6 | Advanced Appointment Booking & Scheduling | 83 | 11 | 13 | 3k+ | | | Text Domain Mismatch |
| #7 | Appointment Bookings for Zoom GoogleMeet and more – Wappointment | 81 | 22 | 52 | 1k+ | | | Non-prefixed class |
| #8 | Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution | 42 | 111 | 17 | 20k+ | | | Exception output is not escaped |
| #9 | Booking Calendar | 36 | 50 | 259 | 50k+ | | | Mixed line endings |
| #10 | Appointment Hour Booking – Booking Calendar | 29 | 42 | 1,224 | 10k+ | | | Non-prefixed global variable |
| #11 | Online Scheduling and Appointment Booking System – Bookly | 25 | 1,095 | 900 | 60k+ | | | SQL query is not prepared |
| #12 | Bookit — Booking & Appointment Calendar | 25 | 565 | 1,458 | 4k+ | | | Non-prefixed global variable |
| #13 | Hydra Booking — Appointment Scheduling & Booking Calendar | 25 | 233 | 702 | 2k+ | | | Non-prefixed global variable |
| #14 | TrueBooker – Appointment Booking and Scheduler System | 25 | 529 | 2,747 | 600 | | | Non-prefixed global variable |
| #15 | VikAppointments Services Booking Calendar | 25 | 9,759 | 5,209 | 500 | | | Output is not escaped |
| #16 | Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | 24 | 1,876 | 957 | 100k+ | | | Output is not escaped |
| #17 | RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress | 24 | 842 | 3,717 | 500 | | | Request data is not unslashed |
| #18 | Booking calendar, Appointment Booking System | 23 | 1,079 | 1,125 | 3k+ | | | Output is not escaped |
