| #1 | Cloudflare | 35 | 28 | 85 | 200k+ | | | Non-prefixed namespace |
| #2 | Simple CAPTCHA with Cloudflare Turnstile | 35 | 75 | 147 | 200k+ | | | Output is not escaped |
| #3 | Flexible SSL for CloudFlare | 35 | 9 | 6 | 100k+ | | | Output is not escaped |
| #4 | Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals | 25 | 143 | 357 | 60k+ | | | Input is not sanitized |
| #5 | Login Security Captcha | 100 | | 0 | 10k+ | | | No open findings |
| #6 | Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more | Pending | - | - | 7k+ | | | Pending scan |
| #7 | Cloudflare SSL by Weslink | 90 | 3 | 7 | 2k+ | | | trademarked term |
| #8 | App for Cloudflare® | 98 | 10 | 1 | 1k+ | | | wp function not compatible with requires wp |
| #9 | Cache Warmer | 38 | 32 | 219 | 1k+ | | | Interpolated SQL is not prepared |
| #10 | CloudGuard | 41 | 41 | 13 | 1k+ | | | Output is not escaped |
| #11 | GeoTargeting Lite – WordPress Geolocation | 35 | 66 | 79 | 1k+ | | | Output is not escaped |
| #12 | Servebolt Optimizer | 24 | 1,958 | 681 | 1k+ | | | Text Domain Mismatch |
| #13 | Easy Spam Filter – Privacy-Friendly CAPTCHA Alternative with Turnstile for Contact Form 7, WPForms, BuddyPress, Elementor | 97 | 2 | 14 | 1k+ | | | Dynamic hook name |
| #14 | Enable Turnstile (Cloudflare) for Gravity Forms | 84 | 8 | 7 | 800 | | | Missing direct file access protection |
| #15 | AI Content Signals | 100 | | 0 | 600 | | | No open findings |
| #16 | Kitgenix CAPTCHA for Cloudflare Turnstile | 100 | | 0 | 600 | | | No open findings |
| #17 | Cloudflare Page Cache | 98 | 2 | 4 | 500 | | | trademarked term |
