| #1 | AI Puffer – Chat. Create. Automate. (formerly AI Power) | 100 | | 0 | 10k+ | | | No open findings |
| #2 | AutoPen – AI Content Writer | 99 | 1 | 9 | 1k+ | | | Non-prefixed global variable |
| #3 | Free Customer Service Tools by OpenWidget | 95 | 2 | 1 | 400 | | | Request data is not unslashed |
| #4 | AI Content Creator – Easy ChatGPT powered article generator | 89 | 15 | 33 | 400 | | | Non-prefixed global variable |
| #5 | HHG for TranslatePress | 84 | 43 | 18 | 1k+ | | | curl curl setopt |
| #6 | Aimogen – AI Content Writer, Chatbot, Editor and AI Automation for WordPress | 84 | 12 | 35 | 400 | | | Not In Footer |
| #7 | WP Wand – Unlimited Content Generation using AI – for OpenAI, Claude, Openrouter and Deepseek | 81 | 101 | 53 | 1k+ | | | Text Domain Mismatch |
| #8 | Ailo – AI Slug Translator | 80 | 8 | 14 | 1k+ | | | wp function not compatible with requires wp |
| #9 | AI Provider for OpenAI | 76 | 15 | 1 | 40k+ | | | Exception output is not escaped |
| #10 | AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation | 56 | 65 | 20 | 1k+ | | | Text Domain Mismatch |
| #11 | AI Assistant for Elementor – Auto Content Writer, OpenAI, ChatGPT | 55 | 151 | 24 | 400 | | | Text Domain Mismatch |
| #12 | Auto Alt Text | 43 | 52 | 13 | 4k+ | | | Exception output is not escaped |
| #13 | AISEO | 31 | 646 | 205 | 1k+ | | | Text Domain Mismatch |
| #14 | AI ChatBot with ChatGPT and Content Generator by AYS | 31 | 170 | 378 | 400 | | | Non-prefixed global variable |
| #15 | ContentBot AI Writer (AI Content) | 30 | 317 | 69 | 400 | | | rand rand |
| #16 | AI Engine – The Chatbot, AI Framework & MCP for WordPress | 23 | 423 | 600 | 100k+ | | | error log error log |
| #17 | Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | 23 | 9,396 | 26,680 | 1k+ | | | Non-prefixed global variable |
| #18 | Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin | 21 | 1,074 | 2,978 | 40k+ | | | Direct Query |
| #19 | AI Infographic Maker | 19 | 1,383 | 599 | 600 | | | Output is not escaped |
