| #1 | GetResponse Official | 100 | | 0 | 4k+ | | | No open findings |
| #2 | Quiz Builder for WooCommerce – Product Recommendations | 99 | | 21 | 2k+ | | | Non-prefixed constant |
| #3 | Shop as Client for WooCommerce – Manual, Phone & Email Orders | 99 | | 5 | 600 | | | Non-prefixed function |
| #4 | Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses | 99 | 1 | 5 | 500 | | | Non-prefixed constant |
| #5 | Product Variations Swatches for WooCommerce | 98 | | 26 | 10k+ | | | Non-prefixed constant |
| #6 | BjornTech Swish for WooCommerce | 98 | 7 | 11 | 2k+ | | | wp function not compatible with requires wp |
| #7 | Stock Exporter for WooCommerce | 98 | 2 | 14 | 1k+ | | | Non-prefixed hook name |
| #8 | Drip – Marketing Automation for WooCommerce | 98 | 22 | 7 | 1k+ | | | Non Singular String Literal Domain |
| #9 | Portugal CTT Tracking for WooCommerce | 98 | 1 | 5 | 600 | | | Non-prefixed function |
| #10 | NIF (Num. de Contribuinte Português) for WooCommerce | 97 | 3 | 10 | 5k+ | | | Non-prefixed constant |
| #11 | WooCommerce Product Image Flipper | 97 | 3 | 5 | 3k+ | | | trademarked term |
| #12 | Force Default Variant for WooCommerce | 97 | 7 | 0 | 3k+ | | | Missing direct file access protection |
| #13 | Syncee Premium Dropshipping & Wholesale | 97 | 50 | 3 | 1k+ | | | Text Domain Mismatch |
| #14 | Multibanco, MB WAY, Credit card, Apple Pay, Google Pay, Payshop, Cofidis Pay, and PIX (ifthenpay) for WooCommerce | 96 | | 68 | 7k+ | | | Non-prefixed function |
| #15 | WooCommerce Product Details Customiser | 96 | 5 | 6 | 2k+ | | | trademarked term |
| #16 | Disable WooCommerce Reviews | 93 | 2 | 4 | 2k+ | | | trademarked term |
| #17 | Order Tip for WooCommerce | 92 | 1 | 71 | 2k+ | | | Non-prefixed global variable |
| #18 | N-Genius Online by Network | 92 | 2 | 38 | 1k+ | | | Non-prefixed class |
| #19 | Storefront Add Slider | 92 | 11 | 1 | 800 | | | Text Domain Mismatch |
| #20 | Storefront Footer Bar | 91 | 6 | 2 | 3k+ | | | Missing Arg Domain |
| #21 | WooCommerce New Product Badge | 91 | 8 | 8 | 800 | | | Text Domain Mismatch |
| #22 | VK Ads Pixel plugin | 90 | 6 | 4 | 2k+ | | | Missing direct file access protection |
| #23 | Continue Shopping Anywhere for WooCommerce | 90 | 21 | 10 | 700 | | | Text Domain Mismatch |
| #24 | Pay in Store WooCommerce Payment Gateway | 87 | 26 | 5 | 2k+ | | | Non Singular String Literal Domain |
| #25 | Simple Catalog for WooCommerce | 87 | 2 | 4 | 1k+ | | | wp redirect wp redirect |
| #26 | PayPal Enterprise Payments (formerly Braintree) for WooCommerce | 86 | 3 | 33 | 10k+ | | | Direct Query |
| #27 | Sold Individually for WooCommerce Product Variations | 86 | 2 | 6 | 800 | | | Missing nonce verification |
| #28 | Magni Image Flip For WooCommerce | 86 | 24 | 8 | 700 | | | Text Domain Mismatch |
| #29 | Thank you page viewer for Woocommerce | 86 | 6 | 3 | 400 | | | Output is not escaped |
| #30 | Storefront Hamburger Menu | 85 | 9 | 1 | 2k+ | | | Output is not escaped |
| #31 | GazChap's WooCommerce Auto Category Product Thumbnails | 85 | 4 | 8 | 1k+ | | | trademarked term |
| #32 | PayPal Payment Buttons | 85 | 232 | 51 | 400 | | | Text Domain Mismatch |
| #33 | Bold pagos en linea | 84 | 4 | 32 | 4k+ | | | Non-prefixed global variable |
| #34 | Wishlist for WooCommerce | 83 | 11 | 8 | 1k+ | | | Output is not escaped |
| #35 | dLocal Go Payments | 83 | 9 | 15 | 400 | | | Missing Translators Comment |
| #36 | Extra Price Fields for Woocommerce- Display extra price info on Woocommerce products | 82 | 6 | 10 | 2k+ | | | Missing nonce verification |
| #37 | MyBookTable Bookstore by Stormhill Media | 82 | 16 | 34 | 1k+ | | | Direct Query |
| #38 | Storefront Homepage Contact Section | 82 | 26 | 2 | 1k+ | | | Output is not escaped |
| #39 | Payfast Gateway for WooCommerce | 81 | 2 | 18 | 2k+ | | | Missing nonce verification |
| #40 | WooCommerce Grid / List toggle | 79 | 10 | 12 | 10k+ | | | Output is not escaped |
| #41 | Weight/Country Shipping for WooCommerce | 79 | 10 | 2 | 800 | | | Unsafe printing function |
| #42 | Breadcrumbs for WooCommerce | 76 | 14 | 2 | 6k+ | | | Output is not escaped |
| #43 | Bulky – Bulk Edit Products for WooCommerce | 75 | 1 | 23 | 10k+ | | | Non-prefixed hook name |
| #44 | eCommerce Product Catalog | 73 | 2 | 2,966 | 7k+ | | | Non-prefixed function |
| #45 | Continue Shopping for WooCommerce | 73 | 9 | 20 | 4k+ | | | Input is not sanitized |
| #46 | Storefront Product Sharing | 72 | 13 | 3 | 4k+ | | | Output is not escaped |
| #47 | AppScenic – Smart AI Dropshipping | 70 | 16 | 41 | 3k+ | | | Dynamic hook name |
| #48 | Spocket ‑ US & EU Dropshipping | 70 | 15 | 31 | 1k+ | | | Direct Query |
| #49 | Search by SKU for Woocommerce | 69 | 13 | 10 | 10k+ | | | Direct Query |
| #50 | Geeky Bot – AI Sales Assistant for WooCommerce | 68 | 7 | 27 | 6k+ | | | Database parameter is not escaped |
