| #1 | Floating Contact Button for MAX and Telegram | 100 | | 0 | 1k+ | | | No open findings |
| #2 | Bolt CTA Button – Floating Call Button for WordPress | 99 | 1 | 2 | 1k+ | | | trademarked term |
| #3 | Mobile Call Buttons | 97 | 1 | 1 | 600 | | | Input is not validated |
| #4 | Button Generator – Easily Create Custom Buttons with Icons and Analytics | 96 | 8 | 68 | 5k+ | | | Non-prefixed global variable |
| #5 | Nút Bấm Liên Hệ Dibrother | 91 | 5 | 2 | 1k+ | | | Missing Arg Domain |
| #6 | Floating Button – Easily Create Sticky, Fixed & Floating Buttons | 84 | 6 | 184 | 4k+ | | | Non-prefixed global variable |
| #7 | Floating Contact Button | 77 | 6 | 3 | 1k+ | | | Output is not escaped |
| #8 | Buttonizer – Live Chat, AI Chatbot, Call, Chat, Contact Button | 44 | 24 | 71 | 50k+ | | | Non-prefixed constant |
| #9 | Sticky Floating Button (Book Now, Contact, Call To Action…) | 42 | 95 | 26 | 900 | | | Missing Arg Domain |
| #10 | Phone Button | 41 | 25 | 203 | 700 | | | Non-prefixed global variable |
| #11 | Call Now Button – The #1 Click to Call Button for WordPress | 37 | 1,273 | 5 | 200k+ | | | Exception output is not escaped |
| #12 | Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress | 28 | 465 | 338 | 30k+ | | | Text Domain Mismatch |
| #13 | Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress | 25 | 498 | 355 | 1k+ | | | Text Domain Mismatch |
| #14 | WP Helper Premium | 24 | 4,000 | 1,590 | 1k+ | | | Text Domain Mismatch |
