| #1 | Teydea Login Customizer – Custom Login Page, Branding & Styling | 100 | | 0 | 10k+ | | | No open findings |
| #2 | Custom Login Logo – Easily Add a Logo to Your WordPress Login Page | 99 | 1 | 2 | 2k+ | | | mismatched plugin name |
| #3 | Easy Hide Login | 93 | 3 | 14 | 20k+ | | | Non-prefixed global variable |
| #4 | Custom Login Css | 81 | 10 | 0 | 400 | | | Missing direct file access protection |
| #5 | Osom Modal Login | 73 | 40 | 12 | 400 | | | Text Domain Mismatch |
| #6 | Custom Login Page Templates – Change Logo, Background and CSS | 66 | 25 | 5 | 2k+ | | | Missing Arg Domain |
| #7 | LoginPress | wp-login Custom Login Page Customizer | 55 | 125 | 308 | 200k+ | | | Non-prefixed function |
| #8 | WIP Custom Login | 52 | 18 | 34 | 700 | | | Input is not sanitized |
| #9 | Admin login URL Change | 44 | 41 | 10 | 2k+ | | | Output is not escaped |
| #10 | Admin Custom Login | 43 | | 236 | 20k+ | | | Request data is not unslashed |
| #11 | Custom Login | 42 | 36 | 111 | 10k+ | | | Non-prefixed global variable |
| #12 | YITH Custom Login | 39 | 86 | 33 | 5k+ | | | Output is not escaped |
| #13 | Birds Custom Login | 39 | 196 | 23 | 4k+ | | | Non Singular String Literal Domain |
| #14 | White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard | 38 | 205 | 31 | 10k+ | | | Output is not escaped |
| #15 | Login Page Customizer – Customize Login Screen & Branding | 38 | 36 | 172 | 1k+ | | | Non-prefixed function |
| #16 | CLP – Custom Login Page by NiteoThemes | 36 | 240 | 49 | 700 | | | Output is not escaped |
| #17 | Sky Login Redirect | 35 | 19 | 18 | 2k+ | | | Non-prefixed hook name |
| #18 | AGCA – Custom Dashboard & Login Page | 34 | 350 | 44 | 20k+ | | | Unsafe printing function |
| #19 | Custom Login Page by SeedProd | 34 | 330 | 125 | 500 | | | Output is not escaped |
| #20 | WPOrLogin – Custom Login, Social Login, Limit Attempts, Hide Login & reCAPTCHA | 31 | 483 | 217 | 2k+ | | | Unsafe printing function |
| #21 | Loginfy – Custom Login Page Customizer | 28 | 338 | 398 | 2k+ | | | Output is not escaped |
| #22 | Custom Login Page Customizer | 23 | 687 | 1,408 | 90k+ | | | Non-prefixed global variable |
| #23 | All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more. | 23 | 645 | 1,415 | 60k+ | | | Non-prefixed global variable |
| #24 | Login & Register Customizer – Forms, Popup, Profile & WooCommerce | 23 | 362 | 1,040 | 40k+ | | | Non-prefixed global variable |
| #25 | Custom Login Page Customizer – Login Designer | 22 | 588 | 1,455 | 30k+ | | | Non-prefixed global variable |
| #26 | Frontend Dashboard | 22 | 375 | 941 | 500 | | | Non-prefixed function |
