| #1 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | | Unsafe printing function |
| #2 | NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization | 23 | 311 | 635 | 90k+ | | | Output is not escaped |
| #3 | Cloudinary – Deliver Images and Videos at Scale | 72 | 691 | 134 | 5k+ | | | Text Domain Mismatch |
| #4 | Easy Optimizer – PageSpeed, Cache & Core Web Vitals (Unused CSS, Delay JS, Lazy Load) | 24 | 194 | 514 | 400 | | | Direct Query |
| #5 | Autoptimize | 23 | 288 | 191 | 800k+ | | | Output is not escaped |
| #6 | RabbitLoader Cache: Optimize your Website for Speed | 22 | 241 | 163 | 2k+ | | | Output is not escaped |
| #7 | Speed Booster Pack ⚡ PageSpeed Optimization Suite | 27 | 108 | 187 | 9k+ | | | Missing Translators Comment |
| #8 | AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization | 31 | 91 | 133 | 2k+ | | | Output is not escaped |
| #9 | Solid Performance – Your No-Code Caching, Performance, & Page Speed Solution | 35 | 75 | 61 | 4k+ | | | Exception output is not escaped |
| #10 | EasyFonts – Host Google Fonts Locally, Fast & Auto-Optimize, GDPR Compliant | 44 | 5 | 70 | 1k+ | | | Interpolated SQL is not prepared |
| #11 | Core Web Vitals & PageSpeed Booster | 100 | | 0 | 1k+ | | | No open findings |
