| #1 | Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score | 20 | 147 | 231 | 3k+ | | | Exception output is not escaped |
| #2 | JCH Optimize | 21 | 953 | 133 | 4k+ | | | Output is not escaped |
| #3 | WP Compress – Instant Performance & Speed Optimization | 21 | 3,349 | 3,218 | 10k+ | | | Non Singular String Literal Domain |
| #4 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,858 | 1,270 | 50k+ | | | Text Domain Mismatch |
| #5 | RabbitLoader Cache: Optimize your Website for Speed | 22 | 241 | 163 | 2k+ | | | Output is not escaped |
| #6 | Seraphinite Accelerator | 22 | 594 | 255 | 50k+ | | | Output is not escaped |
| #7 | SNS Count Cache | 22 | 918 | 120 | 8k+ | | | Non Singular String Literal Domain |
| #8 | Swift Performance Lite | 22 | 2,346 | 1,325 | 7k+ | | | Text Domain Mismatch |
| #9 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | 22 | 513 | 601 | 80k+ | | | Non-prefixed global variable |
| #10 | RapidLoad AI – Optimize Web Vitals Automatically | 22 | 81 | 840 | 800 | | | Nonce verification recommended |
| #11 | Fastcache by Host.it | 23 | 1,327 | 203 | 600 | | | Text Domain Mismatch |
| #12 | NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization | 23 | 315 | 631 | 100k+ | | | Output is not escaped |
| #13 | A2 Optimized WP – Turbocharge and secure your WordPress site | 24 | 271 | 231 | 60k+ | | | Missing Arg Domain |
| #14 | F12 Profiler | 24 | 282 | 451 | 500 | | | Direct Query |
| #15 | Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN | 24 | 3,410 | 866 | 70k+ | | | Text Domain Mismatch |
| #16 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | | Unsafe printing function |
| #17 | WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100) | 24 | 482 | 189 | 2k+ | | | Output is not escaped |
| #18 | Breeze Cache | 25 | 217 | 790 | 400k+ | | | Non-prefixed global variable |
| #19 | Docket Cache – Object Cache Accelerator | 25 | 333 | 481 | 20k+ | | | Output is not escaped |
| #20 | LWS Optimize – All-in-One Speed Booster & Cache Tools | 25 | 430 | 764 | 20k+ | | | Non-prefixed global variable |
| #21 | BerqWP – Automatic WordPress Website Speed Optimization | 25 | 198 | 501 | 4k+ | | | Non-prefixed global variable |
| #22 | Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals | 25 | 137 | 353 | 60k+ | | | Input is not sanitized |
| #23 | WP Super Cache | 25 | 800 | 989 | 1m+ | | | Output is not escaped |
| #24 | ezCache | 26 | 127 | 269 | 10k+ | | | Direct Query |
| #25 | Speed Booster Pack ⚡ PageSpeed Optimization Suite | 27 | 108 | 187 | 9k+ | | | Missing Translators Comment |
| #26 | WPBase Cache | 27 | 189 | 113 | 2k+ | | | Text Domain Mismatch |
| #27 | DB Cache Reloaded Fix | 29 | 133 | 42 | 2k+ | | | Output is not escaped |
| #28 | Jetpack Boost – Website Speed, Performance and Critical CSS | 29 | 659 | 247 | 200k+ | | | Text Domain Mismatch |
| #29 | AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization | 31 | 91 | 133 | 2k+ | | | Output is not escaped |
| #30 | OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. | 31 | 213 | 62 | 300k+ | | | Output is not escaped |
| #31 | SpeedyCache – Cache, Optimization, Performance | 31 | 65 | 118 | 600k+ | | | Input is not validated |
| #32 | APCu Manager | 32 | 151 | 126 | 10k+ | | | Output is not escaped |
| #33 | FastPixel Cache – Optimize Page Speed: Compress Images, Minify, Clean Database & CDN | 33 | 51 | 333 | 4k+ | | | Request data is not unslashed |
| #34 | LWSCache | 33 | 47 | 104 | 6k+ | | | Non-prefixed global variable |
| #35 | Cache Master | 34 | 371 | 27 | 400 | | | Output is not escaped |
| #36 | FV Gravatar Cache | 34 | 50 | 42 | 700 | | | Output is not escaped |
| #37 | Cache Enabler | 35 | 44 | 75 | 90k+ | | | Input is not sanitized |
| #38 | Nginx Cache Controller | 35 | 79 | 96 | 1k+ | | | Text Domain Mismatch |
| #39 | OPcache Manager | 35 | 155 | 75 | 1k+ | | | Output is not escaped |
| #40 | Pods Alternative Cache | 35 | 1 | 0 | 5k+ | | | Hidden files included |
| #41 | Solid Performance – Your No-Code Caching, Performance, & Page Speed Solution | 35 | 75 | 61 | 4k+ | | | Exception output is not escaped |
| #42 | Cache Warmer | 37 | 32 | 220 | 1k+ | | | Interpolated SQL is not prepared |
| #43 | GoCache | 37 | 273 | 43 | 900 | | | Non Singular String Literal Domain |
| #44 | Varnish/Nginx Proxy Caching | 37 | 287 | 36 | 800 | | | Output is not escaped |
| #45 | Easy WP Cleaner | 38 | 58 | 124 | 2k+ | | | Non-prefixed global variable |
| #46 | WPTurbo -WordPress性能优化插件 | 38 | 20 | 34 | 600 | | | Output is not escaped |
| #47 | Posts By Tag | 39 | 151 | 30 | 1k+ | | | Output is not escaped |
| #48 | Purge Varnish Cache | 39 | 113 | 151 | 1k+ | | | Non-prefixed global variable |
| #49 | Far Future Expiry Header | 40 | 25 | 36 | 7k+ | | | Request data is not unslashed |
| #50 | FlyWP Helper – Page Cache, Page Optimization, Emails for FlyWP Server Control Panel | 40 | 20 | 81 | 4k+ | | | Non-prefixed global variable |