| #1 | Chatra Live Chat + ChatBot + Cart Saver | 100 | | 0 | 2k+ | | | No open findings |
| #2 | Boei – AI Chatbot, Live Chat & 50+ Channels | 100 | | 0 | 900 | | | No open findings |
| #3 | HubSpot All-In-One Marketing – Forms, Popups, Live Chat | 98 | 2 | 4 | 200k+ | | | trademarked term |
| #4 | Pure Chat – Live Chat & More! | 98 | 4 | 6 | 3k+ | | | error log error log |
| #5 | Olark Live Chat | 97 | 3 | 16 | 1k+ | | | Non-prefixed global variable |
| #6 | LiveChat – Live Chat Plugin for WP Websites | 95 | 62 | 9 | 10k+ | | | Text Domain Mismatch |
| #7 | Live Chat Plugin for WooCommerce – LiveChat | 95 | 62 | 10 | 1k+ | | | Text Domain Mismatch |
| #8 | Animated Floating Chat Button | 93 | | 5 | 3k+ | | | Nonce verification recommended |
| #9 | Charla Live Chat | 93 | | 9 | 500 | | | Nonce verification recommended |
| #10 | Blazeo | 92 | 4 | 5 | 400 | | | Missing Version |
| #11 | Yivic Easy Live Chat | 91 | 22 | 8 | 1k+ | | | Non Singular String Literal Domain |
| #12 | Livebeep – Chatbot, Live Chat, CRM & Digital Marketing | 87 | 7 | 4 | 400 | | | Output is not escaped |
| #13 | Jotform – AI Chatbot | 85 | | 8 | 5k+ | | | Input is not validated |
| #14 | MyLiveChat – Free Live Chat & AI Chatbot | 82 | 11 | 2 | 900 | | | Non Enqueued Script |
| #15 | Zoho SalesIQ – Live chat, chatbots, and visitor tracking | 73 | 11 | 9 | 10k+ | | | Input is not validated |
| #16 | Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons | 69 | 32 | 24 | 30k+ | | | Text Domain Mismatch |
| #17 | HelpCrunch – Live Chat, Chatbot & Knowledge Base for Customer Service | 69 | 15 | 1 | 2k+ | | | Output is not escaped |
| #18 | Gist All-In-One Marketing – Live Chat, Popups, Email | 69 | 24 | 11 | 500 | | | Output is not escaped |
| #19 | Live Chat with Messenger Customer Chat | 65 | 10 | 23 | 3k+ | | | Input is not sanitized |
| #20 | Lime Connect (formerly Userlike) – WordPress Live Chat plugin | 65 | 22 | 3 | 900 | | | Output is not escaped |
| #21 | Bitrix24 | 65 | 28 | 10 | 600 | | | Text Domain Mismatch |
| #22 | Social Intents – Live Chat | 63 | 42 | 11 | 400 | | | Non Singular String Literal Domain |
| #23 | Contact Form to Chat Apps | Click to Chat to Order – FormyChat | 62 | 33 | 134 | 3k+ | | | Direct Query |
| #24 | AI ChatBot for WooCommerce – WoowBot | 61 | 15 | 184 | 1k+ | | | Non-prefixed global variable |
| #25 | Chat Button & Custom ChatGPT-Powered Bot by GetButton.io | 58 | 26 | 8 | 20k+ | | | Non-prefixed function |
| #26 | Live Chat by Formilla – Real-time Chat & Chatbots Plugin | 57 | 22 | 13 | 2k+ | | | Missing Arg Domain |
| #27 | BotPenguin – Generative AI Chatbot with Live Chat & ChatGPT | 56 | 12 | 7 | 600 | | | Unsafe printing function |
| #28 | Free Live Chat Support | 56 | 9 | 20 | 500 | | | Output is not escaped |
| #29 | LeadBooster Chatbot by Pipedrive | 52 | 38 | 6 | 2k+ | | | Output is not escaped |
| #30 | 3CX Free Live Chat, Calls & Messaging | 47 | 24 | 16 | 100k+ | | | Output is not escaped |
| #31 | ChatBot.com Conversational AI Support | 41 | 72 | 33 | 1k+ | | | Short PHP open tag found |
| #32 | Crisp – Live Chat and Chatbot | 40 | 24 | 20 | 20k+ | | | Unsafe printing function |
| #33 | AI Chatbot for WooCommerce & Live Chat – onWebChat | 40 | 34 | 93 | 700 | | | error log error log |
| #34 | Buttonizer – Live Chat, AI Chatbot, Call, Chat, Contact Button | 37 | 31 | 80 | 50k+ | | | Non-prefixed constant |
| #35 | LiveAgent – Omnichannel Help Desk & Live Chat Software | 37 | 125 | 142 | 400 | | | Non Singular String Literal Domain |
| #36 | WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons | 35 | 44 | 43 | 90k+ | | | Missing Translators Comment |
| #37 | Tidio – Live Chat & AI Chatbots | 33 | 57 | 19 | 70k+ | | | curl curl setopt |
| #38 | Better Chat Support for Messenger | 31 | 75 | 106 | 1k+ | | | Interpolated SQL is not prepared |
| #39 | Re:amaze Helpdesk & Live Chat | 31 | 96 | 115 | 300 | | | Output is not escaped |
| #40 | WPBot – AI ChatBot for Live Support, Lead Generation, WordPress Automation, AI Services | 22 | 172 | 1,726 | 5k+ | | | Non-prefixed global variable |
| #41 | Manago AI & Leadoo AI | 22 | 636 | 460 | 1k+ | | | Unsafe printing function |
