| #1 | ECPay Ecommerce for WooCommerce | 29 | 248 | 370 | 2k+ | | | Missing nonce verification |
| #2 | Trust Badges – Payment Icons & Secure Checkout Seals for WooCommerce | 100 | | 0 | 400 | | | No open findings |
| #3 | RealHomes Stripe Payments | 32 | 201 | 33 | 400 | | | Exception output is not escaped |
| #4 | Shop as Client for WooCommerce – Manual, Phone & Email Orders | 99 | | 5 | 600 | | | Non-prefixed function |
| #5 | Additional Terms Lite for WooCommerce | 99 | | 4 | 2k+ | | | Discouraged text-domain loading |
| #6 | Amazon Pay for WooCommerce | 38 | 30 | 117 | 10k+ | | | Non-prefixed class |
| #7 | AgreeMe Checkboxes For WooCommerce | 40 | 88 | 44 | 500 | | | Text Domain Mismatch |
| #8 | Aplazame | 38 | 34 | 39 | 500 | | | Non-prefixed global variable |
| #9 | AutoCEP | 96 | 7 | 8 | 1k+ | | | error log error log |
| #10 | Autocomplete Address and Location Picker for WooCommerce | 23 | 630 | 1,299 | 2k+ | | | Non-prefixed global variable |
| #11 | Boxy WooCommerce Custom Redirect After Checkout | 74 | 27 | 8 | 600 | | | badly named files |
| #12 | Change Quantity on Checkout for WooCommerce | 35 | 270 | 32 | 4k+ | | | wp function not compatible with requires wp |
| #13 | Checkout Countdown for WooCommerce – Boost Conversions & Reduce Cart Abandonment | 62 | 43 | 12 | 2k+ | | | Output is not escaped |
| #14 | Checkout Files Upload for WooCommerce | 38 | 57 | 120 | 7k+ | | | Input is not sanitized |
| #15 | CheckoutWC Lite – Conversion optimized WooCommerce checkout | 25 | 1,416 | 854 | 2k+ | | | Text Domain Mismatch |
| #16 | Comunas de Chile para WooCommerce | 90 | 5 | 6 | 2k+ | | | trademarked term |
| #17 | Conditional WooCommerce Checkout Field | 40 | 84 | 22 | 400 | | | Unsafe printing function |
| #18 | Custom Post Type WooCommerce Integration – Sell Any CPT with WooCommerce | 75 | 3 | 24 | 400 | | | Non-prefixed hook name |
| #19 | Culqi | 39 | 571 | 88 | 1k+ | | | Text Domain Mismatch |
| #20 | One page checkout and layouts for woocommerce | 38 | 83 | 52 | 3k+ | | | Non-prefixed global variable |
| #21 | Custom Thank You for WooCommerce | 39 | 107 | 57 | 400 | | | Output is not escaped |
| #22 | Dintero Checkout for WooCommerce Payment Methods | 35 | 58 | 48 | 600 | | | Text Domain Mismatch |
| #23 | Dojo for WooCommerce | 65 | 71 | 13 | 800 | | | Text Domain Mismatch |
| #24 | F4 Shipping Phone and E-Mail for WooCommerce | 35 | 21 | 30 | 800 | | | Non-prefixed hook name |
| #25 | Fluid Checkout for WooCommerce – Lite | 26 | 370 | 842 | 20k+ | | | Non-prefixed hook name |
| #26 | GetPaid > Item Inventory | 40 | 112 | 52 | 400 | | | Text Domain Mismatch |
| #27 | GoDaddy Payments for WooCommerce | 38 | 58 | 65 | 2k+ | | | Output is not escaped |
| #28 | imoje | 38 | 62 | 160 | 2k+ | | | Nonce verification recommended |
| #29 | Kustom Checkout for WooCommerce | 35 | 98 | 502 | 10k+ | | | Dynamic hook name |
| #30 | Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses | 99 | 1 | 5 | 500 | | | Non-prefixed constant |
| #31 | myPOS Checkout | 35 | 151 | 8 | 4k+ | | | Text Domain Mismatch |
| #32 | PayPal Payment Buttons | 85 | 232 | 51 | 400 | | | Text Domain Mismatch |
| #33 | PayTR Sanal POS WooCommerce – iFrame API | 36 | 117 | 54 | 10k+ | | | Output is not escaped |
| #34 | Phone Validator with Flags for WooCommerce | 92 | 3 | 2 | 1k+ | | | badly named files |
| #35 | reCAPTCHA for WooCommerce | 42 | 80 | 31 | 40k+ | | | Output is not escaped |
| #36 | Ship to a Different Address Checked/Unchecked for WooCommerce | 99 | 1 | 0 | 600 | | | outdated tested upto header |
| #37 | Svea Checkout for WooCommerce | 35 | 18 | 72 | 800 | | | Request data is not unslashed |
| #38 | Terms & Conditions Per Product | 27 | 533 | 1,336 | 800 | | | Non-prefixed global variable |
| #39 | Timologia for WooCommerce | 57 | 75 | 22 | 3k+ | | | Text Domain Mismatch |
| #40 | TP Show Product Images on Checkout Page for WooCommerce | 64 | 16 | 5 | 500 | | | Setting is missing a sanitization callback |
| #41 | UK Address Postcode Validation | 75 | 72 | 33 | 700 | | | Non Singular String Literal Domain |
| #42 | Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification | 31 | 237 | 896 | 2k+ | | | Missing nonce verification |
| #43 | Gateway for Wise on WooCommerce | 49 | 28 | 30 | 1k+ | | | Output is not escaped |
| #44 | Better Usability for WooCommerce | 47 | 30 | 93 | 800 | | | Non-prefixed hook name |
| #45 | CardCom Payment Gateway | 35 | 201 | 84 | 3k+ | | | Text Domain Mismatch |
| #46 | Force Authentification Before Checkout for WooCommerce | 81 | 12 | 4 | 5k+ | | | Output is not escaped |
| #47 | PayZen for WooCommerce | 28 | 258 | 214 | 600 | | | Output is not escaped |
| #48 | Pelecard Gateway | 76 | 295 | 54 | 400 | | | Text Domain Mismatch |
| #49 | Brazilian Market on WooCommerce | 75 | 4 | 51 | 60k+ | | | Missing nonce verification |
| #50 | WP Eventbrite Embedded Checkout | 52 | 49 | 7 | 700 | | | Text Domain Mismatch |