| #1 | WooCommerce | 22 | 1,359 | 6,172 | 7m+ | | | Non-prefixed global variable |
| #2 | Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation | 32 | 462 | 41 | 1m+ | | | Text Domain Mismatch |
| #3 | WooCommerce PayPal Payments | 37 | 194 | 110 | 800k+ | | | Exception output is not escaped |
| #4 | Mailchimp for WooCommerce | 24 | 523 | 663 | 200k+ | | | Non-prefixed global variable |
| #5 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | 24 | 2,581 | 2,109 | 100k+ | | | Output is not escaped |
| #6 | Download Manager | 22 | 2,513 | 1,462 | 100k+ | | | Output is not escaped |
| #7 | Download Monitor | 19 | 424 | 1,362 | 80k+ | | | Non-prefixed hook name |
| #8 | TI WooCommerce Wishlist | 24 | 467 | 546 | 100k+ | | | Output is not escaped |
| #9 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,723 | 10,283 | 40k+ | | | Non-prefixed namespace |
| #10 | Mercado Pago payments for WooCommerce | 33 | 614 | 63 | 100k+ | | | Short PHP open tag found |
| #11 | WPML Multilingual & Multicurrency for WooCommerce | 24 | 1,453 | 1,618 | 100k+ | | | SQL query is not prepared |
| #12 | Mollie Payments for WooCommerce | 33 | 70 | 123 | 100k+ | | | Dynamic hook name |
| #13 | SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments | 19 | 525 | 1,120 | 90k+ | | | Non-prefixed global variable |
| #14 | Ecwid by Lightspeed Ecommerce Shopping Cart | 23 | 339 | 307 | 20k+ | | | Missing direct file access protection |
| #15 | Website Pop-up Builder by BDOW! (formerly Sumo): Pop-ups + forms for email opt-ins and lead generation | 37 | 42 | 33 | 10k+ | | | Output is not escaped |
| #16 | PayPal Enterprise Payments (formerly Braintree) for WooCommerce | 86 | 3 | 33 | 10k+ | | | Direct Query |
| #17 | Simple Shopping Cart | 22 | 796 | 536 | 10k+ | | | Unsafe printing function |
| #18 | Klarna for WooCommerce | 26 | 284 | 507 | 30k+ | | | Dynamic hook name |
| #19 | MailerLite – WooCommerce integration | 34 | 64 | 36 | 30k+ | | | Output is not escaped |
| #20 | Kustom Checkout for WooCommerce | 35 | 101 | 505 | 10k+ | | | Dynamic hook name |
| #21 | eCommerce Product Catalog Plugin for WordPress | 24 | 621 | 3,177 | 7k+ | | | Non-prefixed function |
| #22 | CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x | 39 | 7 | 222 | 20k+ | | | Non-prefixed hook name |
| #23 | StoreCustomizer – A plugin to Customize all WooCommerce Pages | 23 | 587 | 1,426 | 20k+ | | | Non-prefixed global variable |
| #24 | Shopping Cart & eCommerce Store | 18 | 5,541 | 17,397 | 4k+ | | | Non-prefixed global variable |
| #25 | Conversion Tracking for WooCommerce | 35 | 74 | 61 | 20k+ | | | Output is not escaped |
| #26 | FOMO & Social Proof Notifications by TrustPulse – Best WordPress FOMO Plugin | 36 | 104 | 39 | 10k+ | | | Output is not escaped |
| #27 | WP WooCommerce Mailchimp | 37 | 62 | 85 | 6k+ | | | Non-prefixed hook name |
| #28 | Japanized for WooCommerce | 35 | 6 | 68 | 10k+ | | | Non-prefixed class |
| #29 | Payment Button for PayPal | 36 | 155 | 86 | 4k+ | | | Unsafe printing function |
| #30 | WooCommerce Grid / List toggle | 79 | 10 | 12 | 10k+ | | | Output is not escaped |
| #31 | Accept Donations with PayPal & Stripe | 26 | 916 | 572 | 10k+ | | | Unsafe printing function |
| #32 | ActiveCampaign for WooCommerce | 26 | 541 | 190 | 6k+ | | | Exception output is not escaped |
| #33 | Contact Form 7 – PayPal & Stripe Add-on | 34 | 93 | 233 | 7k+ | | | Exception output is not escaped |
| #34 | Product Variations Swatches for WooCommerce | 67 | 8 | 136 | 10k+ | | | Non-prefixed global variable |
| #35 | WCPOS – Point of Sale (POS) plugin for WooCommerce | 30 | 77 | 228 | 5k+ | | | Nonce verification recommended |
| #36 | Bulky – Bulk Edit Products for WooCommerce | 81 | 3 | 21 | 10k+ | | | Non-prefixed hook name |
| #37 | Premium Packages – Sell Digital Products Securely | 20 | 2,032 | 2,232 | 2k+ | | | Non-prefixed global variable |
| #38 | YITH WooCommerce Product Slider Carousel | 30 | 389 | 1,479 | 4k+ | | | Non-prefixed global variable |
| #39 | Easy PayPal & Stripe Buy Now Button | 40 | 388 | 96 | 10k+ | | | Unsafe printing function |
| #40 | ShopWP | 22 | 430 | 225 | 700 | | | Text Domain Mismatch |
| #41 | Pay for Payment for WooCommerce | 41 | 29 | 67 | 10k+ | | | Missing nonce verification |
| #42 | Beeketing for WooCommerce – Marketing Automation to Boost Sales | 34 | 113 | 123 | 600 | | | SQL query is not prepared |
| #43 | Multibanco, MB WAY, Credit card, Apple Pay, Google Pay, Payshop, Cofidis Pay, and PIX (ifthenpay) for WooCommerce | 95 | | 86 | 7k+ | | | Non-prefixed function |
| #44 | SumUp Payment Gateway For WooCommerce | 35 | 29 | 62 | 10k+ | | | Nonce verification recommended |
| #45 | Storefront Product Sharing | 72 | 13 | 3 | 4k+ | | | Output is not escaped |
| #46 | Smart Variations Images & Swatches for WooCommerce | 24 | 990 | 1,486 | 1k+ | | | Non-prefixed global variable |
| #47 | iyzico for WooCommerce | 42 | 34 | 54 | 10k+ | | | Unsafe printing function |
| #48 | WP Stripe Checkout | 36 | 198 | 118 | 1k+ | | | Unsafe printing function |
| #49 | MyBookTable Bookstore by Stormhill Media | 82 | 16 | 34 | 1k+ | | | Direct Query |
| #50 | Nexi Checkout | 35 | 45 | 308 | 3k+ | | | Dynamic hook name |