| #1 | Hostinger Reach – AI-Powered Email Marketing for WordPress | 40 | 9 | 49 | 1m+ | | | Direct Query |
| #2 | CartFlows – Funnel Builder & Checkout Plugin for WooCommerce | 21 | 462 | 656 | 200k+ | | | Text Domain Mismatch |
| #3 | Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation | 24 | 1,211 | 3,153 | 30k+ | | | Non-prefixed global variable |
| #4 | Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content | 24 | 237 | 291 | 20k+ | | | error log print r |
| #5 | Icegram Engage – Popups, Optins, CTAs & Lead Generation | 92 | 13 | 10 | 10k+ | | | wp function not compatible with requires wp |
| #6 | Leadpages | 60 | 4 | 53 | 10k+ | | | Direct Query |
| #7 | Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads | 77 | 17 | 1 | 10k+ | | | Exception output is not escaped |
| #8 | Lead Form Builder & Contact Form | 35 | 400 | 345 | 9k+ | | | Output is not escaped |
| #9 | Chatbot for WordPress by Collect.chat ⚡️ | 38 | 58 | 36 | 6k+ | | | Unsafe printing function |
| #10 | Quiz Maker, Poll Maker & Survey Maker by Opinion Stage | 35 | 42 | 32 | 6k+ | | | Output is not escaped |
| #11 | Instapage Plugin | 35 | 220 | 45 | 4k+ | | | Output is not escaped |
| #12 | Bazz CallBack widget | 42 | 55 | 28 | 3k+ | | | Unsafe printing function |
| #13 | iConvert Promoter | 57 | 98 | 217 | 2k+ | | | Non-prefixed global variable |
| #14 | Albacross – B2B Website Visitor Identification | 99 | 1 | 1 | 1k+ | | | Missing Version |
| #15 | Coupon Creator | 25 | 698 | 412 | 1k+ | | | Output is not escaped |
| #16 | Formstack Online Forms | 52 | 39 | 20 | 1k+ | | | Output is not escaped |
| #17 | WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation | 66 | 8 | 89 | 1k+ | | | Non-prefixed global variable |
| #18 | SiteGround Email Marketing | 88 | 18 | 75 | 1k+ | | | Non-prefixed namespace |
| #19 | Stylish Cost Calculator – Quote Generator, Lead Gen & Price Estimator | 25 | 648 | 1,021 | 1k+ | | | Output is not escaped |
| #20 | Easy Subscribe | 44 | | 136 | 900 | | | Direct Query |
| #21 | Contact Forms by Cimatti | 100 | | 0 | 600 | | | No open findings |
| #22 | Happierleads – Identify your B2B website visitors even if they work remotely | 63 | 32 | 7 | 600 | | | wp function not compatible with requires wp |
| #23 | Lead Generation Form | 35 | 21 | 63 | 600 | | | Non-prefixed global variable |
| #24 | Popupsmart | 79 | 28 | 2 | 600 | | | Output is not escaped |
| #25 | Wisepops Popups & Notifications | 78 | | 15 | 500 | | | Nonce verification recommended |
