| #1 | Share Buttons & AI-powered Summaries | 100 | | 0 | 1k+ | | | No open findings |
| #2 | Block AI Crawlers | 100 | 1 | 0 | 1k+ | | | Offloaded Content |
| #3 | AutoPen – AI Content Writer | 99 | 1 | 9 | 3k+ | | | Non-prefixed global variable |
| #4 | LLMs.txt Generator | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #5 | AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o | 96 | 5 | 54 | 2k+ | | | Non-prefixed global variable |
| #6 | LocoAI – Auto Translate for Loco Translate | 95 | 9 | 3 | 70k+ | | | wp function not compatible with requires wp |
| #7 | Agent Abilities for MCP – MCP Server with Permission Controls and Audit Log | 92 | | 9 | 300 | | | Database parameter is not escaped |
| #8 | eMagicOne Store Manager for WooCommerce | 91 | 6 | 19 | 500 | | | Non-prefixed class |
| #9 | Easy MCP AI – Connect Claude to WordPress: MCP Server for ChatGPT & AI Agents | 90 | 3 | 12 | 10k+ | | | Database parameter is not escaped |
| #10 | AI Content Creator – Easy ChatGPT powered article generator | 89 | 15 | 33 | 400 | | | Non-prefixed global variable |
| #11 | Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More | 88 | 13 | 32 | 2k+ | | | wp function not compatible with requires wp |
| #12 | YLabs AI Assistant Connector | 86 | 3 | 4 | 1k+ | | | Output is not escaped |
| #13 | Jotform – AI Chatbot | 85 | | 8 | 5k+ | | | Input is not validated |
| #14 | Secure MCP Server for Claude, ChatGPT, Gemini and other AI providers | 85 | 2 | 27 | 4k+ | | | Database parameter is not escaped |
| #15 | WP Wand – Unlimited Content Generation using AI – for OpenAI, Claude, Openrouter and Deepseek | 81 | 101 | 53 | 1k+ | | | Text Domain Mismatch |
| #16 | Social Intents – Live Chat | 63 | 42 | 11 | 400 | | | Non Singular String Literal Domain |
| #17 | Chat Button & Custom ChatGPT-Powered Bot by GetButton.io | 58 | 26 | 8 | 20k+ | | | Non-prefixed function |
| #18 | BotPenguin – Generative AI Chatbot with Live Chat & ChatGPT | 56 | 12 | 7 | 600 | | | Unsafe printing function |
| #19 | AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation | 55 | 66 | 25 | 1k+ | | | Text Domain Mismatch |
| #20 | AI Assistant for Elementor – Auto Content Writer, OpenAI, ChatGPT | 55 | 151 | 24 | 300 | | | Text Domain Mismatch |
| #21 | Flex MCP – Connect ChatGPT, Claude and AI agents with MCP, Undo, Abilities and Tools. | 40 | 16 | 131 | 800 | | | Interpolated SQL is not prepared |
| #22 | AxiaChat AI – Free AI Chatbot (Answers Customers Automatically) | 39 | 5 | 160 | 600 | | | Interpolated SQL is not prepared |
| #23 | Royal MCP – Secure AI Connector for Claude, ChatGPT & any LLM via MCP | 37 | 47 | 130 | 10k+ | | | Interpolated SQL is not prepared |
| #24 | Hyve Lite – AI Chatbot Trained on WordPress Posts, Pages, Products & More with ChatGPT | 35 | 2 | 56 | 7k+ | | | Direct Query |
| #25 | WPVibe – WordPress MCP Server. Connect Claude, ChatGPT & Any AI Agent via MCP | 33 | 55 | 121 | 40k+ | | | Missing Translators Comment |
| #26 | AI WP Writer – SEO content generator, chatGPT, Gemini, Claude | 32 | 610 | 538 | 3k+ | | | Text Domain Mismatch |
| #27 | AI ChatBot with ChatGPT and Content Generator by AYS | 31 | 170 | 391 | 300 | | | Non-prefixed global variable |
| #28 | ContentBot AI Writer (AI Content) | 30 | 317 | 69 | 400 | | | rand rand |
| #29 | AI Content Writing Assistant | 26 | 1,069 | 516 | 700 | | | Text Domain Mismatch |
| #30 | Kognetiks Chatbot | 25 | 190 | 1,520 | 600 | | | Direct Query |
| #31 | MxChat – AI Chatbot & Content Generation for WordPress | 24 | 3,754 | 1,898 | 2k+ | | | Text Domain Mismatch |
| #32 | Social Sharing Plugin – Sassy Social Share | 22 | 1,689 | 233 | 100k+ | | | wp function not compatible with requires wp |
| #33 | WPBot – AI ChatBot for Live Support, Lead Generation, WordPress Automation, AI Services | 22 | 172 | 1,725 | 5k+ | | | Non-prefixed global variable |
