| #1 | Force Authentification Before Checkout for WooCommerce | 100 | | 1 | 5k+ | | | trademarked term |
| #2 | WP Eventbrite Embedded Checkout | 100 | | 3 | 700 | | | trademarked term |
| #3 | Trust Badges – Payment Icons & Secure Checkout Seals for WooCommerce | 100 | | 0 | 400 | | | No open findings |
| #4 | Additional Terms Lite for WooCommerce | 99 | | 4 | 2k+ | | | Discouraged text-domain loading |
| #5 | Minimum Order Amount for WooCommerce | 99 | 25 | 5 | 2k+ | | | Text Domain Mismatch |
| #6 | Shop as Client for WooCommerce – Manual, Phone & Email Orders | 99 | | 5 | 600 | | | Non-prefixed function |
| #7 | Ship to a Different Address Checked/Unchecked for WooCommerce | 99 | 1 | 0 | 600 | | | outdated tested upto header |
| #8 | Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses | 99 | 1 | 5 | 500 | | | Non-prefixed constant |
| #9 | Phone Validator with Flags for WooCommerce | 92 | 3 | 2 | 1k+ | | | badly named files |
| #10 | Comunas de Chile para WooCommerce | 90 | 5 | 6 | 2k+ | | | trademarked term |
| #11 | PayPal Payment Buttons | 85 | 232 | 51 | 500 | | | Text Domain Mismatch |
| #12 | Minimum Age for WooCommerce | 80 | 12 | 8 | 300 | | | Output is not escaped |
| #13 | Pelecard Gateway | 76 | 295 | 54 | 300 | | | Text Domain Mismatch |
| #14 | Brazilian Market on WooCommerce | 75 | 4 | 51 | 60k+ | | | Missing nonce verification |
| #15 | UK Address Postcode Validation | 75 | 72 | 33 | 700 | | | Non Singular String Literal Domain |
| #16 | Custom Post Type WooCommerce Integration – Sell Any CPT with WooCommerce | 75 | 3 | 24 | 300 | | | Non-prefixed hook name |
| #17 | Boxy WooCommerce Custom Redirect After Checkout | 74 | 27 | 8 | 500 | | | badly named files |
| #18 | Yampi Checkout | 70 | 6 | 10 | 800 | | | Nonce verification recommended |
| #19 | Dojo for WooCommerce | 65 | 71 | 13 | 800 | | | Text Domain Mismatch |
| #20 | TP Show Product Images on Checkout Page for WooCommerce | 64 | 16 | 5 | 500 | | | Setting is missing a sanitization callback |
| #21 | Checkout Countdown for WooCommerce – Boost Conversions & Reduce Cart Abandonment | 62 | 43 | 12 | 1k+ | | | Output is not escaped |
| #22 | Timologia for WooCommerce | 57 | 75 | 22 | 3k+ | | | Text Domain Mismatch |
| #23 | WC Korkmaz Contract – Contracts for WooCommerce | 57 | 7 | 40 | 500 | | | Non-prefixed global variable |
| #24 | Gateway for Wise on WooCommerce | 49 | 28 | 30 | 1k+ | | | Output is not escaped |
| #25 | Better Usability for WooCommerce | 47 | 30 | 93 | 800 | | | Non-prefixed hook name |
| #26 | reCAPTCHA for WooCommerce | 42 | 80 | 31 | 40k+ | | | Output is not escaped |
| #27 | GetPaid > Item Inventory | 40 | 112 | 52 | 500 | | | Text Domain Mismatch |
| #28 | AgreeMe Checkboxes For WooCommerce | 40 | 88 | 44 | 500 | | | Text Domain Mismatch |
| #29 | Conditional WooCommerce Checkout Field | 40 | 84 | 22 | 400 | | | Unsafe printing function |
| #30 | Culqi | 39 | 571 | 88 | 1k+ | | | Text Domain Mismatch |
| #31 | Custom Thank You for WooCommerce | 39 | 107 | 57 | 400 | | | Output is not escaped |
| #32 | Amazon Pay for WooCommerce | 38 | 30 | 117 | 10k+ | | | Non-prefixed class |
| #33 | Checkout Files Upload for WooCommerce | 38 | 57 | 122 | 7k+ | | | Input is not sanitized |
| #34 | One page checkout and layouts for woocommerce | 38 | 83 | 52 | 3k+ | | | Non-prefixed global variable |
| #35 | GoDaddy Payments for WooCommerce | 38 | 58 | 65 | 2k+ | | | Output is not escaped |
| #36 | Aplazame | 38 | 34 | 39 | 500 | | | Non-prefixed global variable |
| #37 | imoje | 37 | 68 | 67 | 2k+ | | | Output is not escaped |
| #38 | PayTR Sanal POS WooCommerce – iFrame API | 36 | 117 | 54 | 10k+ | | | Output is not escaped |
| #39 | Payment Button for PayPal | 36 | 160 | 92 | 4k+ | | | Unsafe printing function |
| #40 | myPOS Checkout | 35 | 151 | 8 | 4k+ | | | Text Domain Mismatch |
| #41 | Change Quantity on Checkout for WooCommerce | 35 | 270 | 32 | 4k+ | | | wp function not compatible with requires wp |
| #42 | Svea Checkout for WooCommerce | 35 | 18 | 72 | 800 | | | Request data is not unslashed |
| #43 | F4 Shipping Phone and E-Mail for WooCommerce | 35 | 21 | 30 | 800 | | | Non-prefixed hook name |
| #44 | Dintero Checkout for WooCommerce Payment Methods | 35 | 57 | 49 | 600 | | | Text Domain Mismatch |
| #45 | Payoneer Checkout | 34 | 167 | 45 | 5k+ | | | Exception output is not escaped |
| #46 | CardCom Payment Gateway | 34 | 203 | 88 | 3k+ | | | Text Domain Mismatch |
| #47 | ePayco plugin for WooCommerce | 34 | 160 | 95 | 3k+ | | | Text Domain Mismatch |
| #48 | RealHomes Stripe Payments | 32 | 201 | 33 | 400 | | | Exception output is not escaped |
| #49 | ECPay Ecommerce for WooCommerce | 29 | 248 | 370 | 2k+ | | | Missing nonce verification |
| #50 | Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification | 28 | 259 | 1,187 | 2k+ | | | Direct Query |