| #1 | AI Puffer – Chat. Create. Automate. (formerly AI Power) | 100 | | 0 | 10k+ | | | No open findings |
| #2 | Chatra Live Chat + ChatBot + Cart Saver | 100 | | 0 | 2k+ | | | No open findings |
| #3 | Chaport — Live Chat & Chatbots | 98 | 5 | 0 | 2k+ | | | wp function not compatible with requires wp |
| #4 | Smartsupp – live chat, AI shopping assistant and chatbots | 96 | 16 | 4 | 20k+ | | | wp function not compatible with requires wp |
| #5 | AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o | 96 | 5 | 54 | 2k+ | | | Non-prefixed global variable |
| #6 | LiveChat – Live Chat Plugin for WP Websites | 95 | 62 | 9 | 10k+ | | | Text Domain Mismatch |
| #7 | FastBots | 92 | 3 | 2 | 1k+ | | | Non Enqueued Script |
| #8 | Cliengo – Chatbot | 91 | 4 | 7 | 2k+ | | | Input is not sanitized |
| #9 | Jotform – AI Chatbot | 85 | | 8 | 5k+ | | | Input is not validated |
| #10 | Aimogen – AI Content Writer, Chatbot, Editor and AI Automation for WordPress | 84 | 12 | 34 | 400 | | | Not In Footer |
| #11 | Boei – AI Chatbot, Live Chat & 50+ Channels for WordPress | 78 | 9 | 4 | 1k+ | | | Output is not escaped |
| #12 | AI Chatbot for WooCommerce – StoreAgent | 74 | 4 | 203 | 500 | | | Non-prefixed global variable |
| #13 | Zoho SalesIQ – Live chat, chatbots, and visitor tracking | 73 | 11 | 9 | 20k+ | | | Input is not validated |
| #14 | Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons | 69 | 32 | 24 | 30k+ | | | Text Domain Mismatch |
| #15 | HelpCrunch – Live Chat, Chatbot & Knowledge Base for Customer Service | 69 | 15 | 1 | 2k+ | | | Output is not escaped |
| #16 | Futy.io Leadbots | 65 | 73 | 9 | 2k+ | | | wp function not compatible with requires wp |
| #17 | Typebot | 59 | 17 | 9 | 3k+ | | | Output is not escaped |
| #18 | UltraPress – AI Assistant, Chatbot & SEO | 59 | 12 | 38 | 800 | | | Non-prefixed global variable |
| #19 | Live Chat by Formilla – Real-time Chat & Chatbots Plugin | 57 | 22 | 13 | 2k+ | | | Missing Arg Domain |
| #20 | AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation | 56 | 65 | 20 | 1k+ | | | Text Domain Mismatch |
| #21 | BotPenguin – Generative AI Chatbot with Live Chat & ChatGPT | 56 | 12 | 7 | 600 | | | Unsafe printing function |
| #22 | AI Agent by SiteGround | 54 | 28 | 6 | 1m+ | | | Exception output is not escaped |
| #23 | Customize Tawk.to Widget | 50 | 21 | 28 | 500 | | | Request data is not unslashed |
| #24 | Buttonizer – Live Chat, AI Chatbot, Call, Chat, Contact Button | 44 | 24 | 71 | 50k+ | | | Non-prefixed constant |
| #25 | ChatBot.com Conversational AI Support | 41 | 72 | 33 | 1k+ | | | Short PHP open tag found |
| #26 | Crisp – Live Chat and Chatbot | 40 | 24 | 20 | 20k+ | | | Unsafe printing function |
| #27 | Chatbot for WordPress by Collect.chat ⚡️ | 38 | 58 | 36 | 6k+ | | | Unsafe printing function |
| #28 | All-in-one Chat Button by anychat.one | 37 | 119 | 69 | 900 | | | Text Domain Mismatch |
| #29 | Zeno – AI-Powered Chatbot | 36 | 311 | 131 | 400 | | | Text Domain Mismatch |
| #30 | LIQUID CONNECT | 35 | 293 | 177 | 400 | | | Output is not escaped |
| #31 | Tidio – Live Chat & AI Chatbots | 34 | 52 | 19 | 70k+ | | | curl curl setopt |
| #32 | Chatbot with IBM watsonx Assistant | 33 | 324 | 83 | 400 | | | Non Singular String Literal Domain |
| #33 | AI ChatBot with ChatGPT and Content Generator by AYS | 31 | 170 | 378 | 400 | | | Non-prefixed global variable |
| #34 | AI Copilot – Content Generator | 29 | 80 | 322 | 1k+ | | | Direct Query |
| #35 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,226 | 1k+ | | | Text Domain Mismatch |
| #36 | AI ChatBot for WooCommerce – WoowBot | 24 | 144 | 524 | 900 | | | Request data is not unslashed |
| #37 | AI Engine – The Chatbot, AI Framework & MCP for WordPress | 23 | 423 | 600 | 100k+ | | | error log error log |
| #38 | WPBot – AI ChatBot for Live Support, Lead Generation, AI Services | 23 | 514 | 1,220 | 5k+ | | | Non-prefixed global variable |
