| #1 | RealHomes Stripe Payments | 32 | 201 | 33 | 500 | | | Exception output is not escaped |
| #2 | AgreeMe Checkboxes For WooCommerce | 40 | 88 | 44 | 600 | | | Text Domain Mismatch |
| #3 | Aplazame | 38 | 34 | 39 | 600 | | | Non-prefixed global variable |
| #4 | AutoCEP | 96 | 7 | 8 | 1k+ | | | error log error log |
| #5 | Autocomplete Address and Location Picker for WooCommerce | 23 | 630 | 1,299 | 2k+ | | | Non-prefixed global variable |
| #6 | Boxy WooCommerce Custom Redirect After Checkout | 74 | 27 | 8 | 700 | | | badly named files |
| #7 | Change Quantity on Checkout for WooCommerce | 35 | 270 | 32 | 4k+ | | | wp function not compatible with requires wp |
| #8 | Checkout Countdown for WooCommerce – Boost Conversions & Reduce Cart Abandonment | 62 | 43 | 12 | 4k+ | | | Output is not escaped |
| #9 | Checkout Files Upload for WooCommerce | 38 | 57 | 120 | 7k+ | | | Input is not sanitized |
| #10 | Comunas de Chile para WooCommerce | 90 | 5 | 6 | 2k+ | | | trademarked term |
| #11 | Conditional WooCommerce Checkout Field | 40 | 84 | 22 | 400 | | | Unsafe printing function |
| #12 | Culqi | 39 | 571 | 88 | 1k+ | | | Text Domain Mismatch |
| #13 | One page checkout and layouts for woocommerce | 38 | 83 | 52 | 3k+ | | | Non-prefixed global variable |
| #14 | Custom Thank You for WooCommerce | 39 | 107 | 57 | 400 | | | Output is not escaped |
| #15 | Dintero Checkout for WooCommerce Payment Methods | 35 | 58 | 48 | 600 | | | Text Domain Mismatch |
| #16 | Dojo for WooCommerce | 65 | 71 | 13 | 800 | | | Text Domain Mismatch |
| #17 | ECPay Ecommerce for WooCommerce | 24 | 491 | 739 | 2k+ | | | Missing nonce verification |
| #18 | F4 Shipping Phone and E-Mail for WooCommerce | 35 | 24 | 26 | 800 | | | Non-prefixed hook name |
| #19 | FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler | 25 | 319 | 466 | 7k+ | | | Non-prefixed global variable |
| #20 | Fluid Checkout for WooCommerce – Lite | 25 | 370 | 841 | 20k+ | | | Non-prefixed hook name |
| #21 | GetPaid > Item Inventory | 40 | 112 | 52 | 400 | | | Text Domain Mismatch |
| #22 | GoDaddy Payments for WooCommerce | 38 | 58 | 65 | 2k+ | | | Output is not escaped |
| #23 | imoje | 38 | 62 | 160 | 2k+ | | | Nonce verification recommended |
| #24 | Kustom Checkout for WooCommerce | 35 | 101 | 505 | 10k+ | | | Dynamic hook name |
| #25 | Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses | 99 | 1 | 5 | 500 | | | Non-prefixed constant |
| #26 | Mini Cart for WooCommerce – Add a Stylish Sliding Cart | 35 | 42 | 160 | 600 | | | Non-prefixed global variable |
| #27 | myPOS Checkout | 35 | 151 | 8 | 4k+ | | | Text Domain Mismatch |
| #28 | Payoneer Checkout | 34 | 168 | 41 | 5k+ | | | Exception output is not escaped |
| #29 | PayTR Sanal POS WooCommerce – iFrame API | 36 | 117 | 54 | 10k+ | | | Output is not escaped |
| #30 | PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) | 20 | 440 | 750 | 400 | | | Missing direct file access protection |
| #31 | Phone Validator with Flags for WooCommerce | 92 | 3 | 2 | 800 | | | badly named files |
| #32 | reCAPTCHA for WooCommerce | 42 | 80 | 31 | 40k+ | | | Output is not escaped |
| #33 | Ship to a Different Address Checked/Unchecked for WooCommerce | 99 | 1 | 0 | 600 | | | outdated tested upto header |
| #34 | Shop as Client for WooCommerce – Manual, Phone & Email Orders | 98 | 1 | 5 | 600 | | | Non-prefixed function |
| #35 | Svea Checkout for WooCommerce | 35 | 18 | 72 | 800 | | | Request data is not unslashed |
| #36 | Terms & Conditions Per Product | 27 | 533 | 1,336 | 800 | | | Non-prefixed global variable |
| #37 | Timologia for WooCommerce | 57 | 75 | 22 | 3k+ | | | Text Domain Mismatch |
| #38 | TP Show Product Images on Checkout Page for WooCommerce | 64 | 16 | 5 | 500 | | | Setting is missing a sanitization callback |
| #39 | UK Address Postcode Validation | 75 | 68 | 33 | 700 | | | Non Singular String Literal Domain |
| #40 | Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification | 31 | 284 | 830 | 2k+ | | | Missing nonce verification |
| #41 | WC Korkmaz Contract – Contracts for WooCommerce | 59 | 7 | 38 | 600 | | | Non-prefixed global variable |
| #42 | Gateway for Wise on WooCommerce | 49 | 28 | 30 | 1k+ | | | Output is not escaped |
| #43 | Additional Terms for WooCommerce | 98 | 1 | 7 | 2k+ | | | trademarked term |
| #44 | Better Usability for WooCommerce | 47 | 27 | 84 | 800 | | | Non-prefixed hook name |
| #45 | CardCom Payment Gateway | 35 | 201 | 84 | 3k+ | | | Text Domain Mismatch |
| #46 | Force Authentification Before Checkout for WooCommerce | 81 | 12 | 4 | 6k+ | | | Output is not escaped |
| #47 | PayZen for WooCommerce | 28 | 258 | 214 | 600 | | | Output is not escaped |
| #48 | Pelecard Gateway | 76 | 295 | 54 | 400 | | | Text Domain Mismatch |
| #49 | Brazilian Market on WooCommerce | 75 | 4 | 51 | 70k+ | | | Missing nonce verification |
| #50 | Amazon Pay for WooCommerce | 37 | 29 | 117 | 20k+ | | | Non-prefixed class |