| #1 | AI Puffer – Chat. Create. Automate. (formerly AI Power) | 100 | | 0 | 10k+ | | | No open findings |
| #2 | AutoPen – AI Content Writer | 99 | 1 | 9 | 4k+ | | | Non-prefixed global variable |
| #3 | Free Customer Service Tools by OpenWidget | 95 | 2 | 1 | 400 | | | Request data is not unslashed |
| #4 | AI Content Creator – Easy ChatGPT powered article generator | 89 | 15 | 33 | 400 | | | Non-prefixed global variable |
| #5 | HHG for TranslatePress | 84 | 43 | 18 | 1k+ | | | curl curl setopt |
| #6 | WP Wand – Unlimited Content Generation using AI – for OpenAI, Claude, Openrouter and Deepseek | 81 | 101 | 53 | 1k+ | | | Text Domain Mismatch |
| #7 | Ailo – AI Slug Translator | 81 | | 15 | 1k+ | | | Interpolated SQL is not prepared |
| #8 | Aimogen – AI Content Writer, Chatbot, Editor and AI Automation for WordPress | 81 | 13 | 95 | 400 | | | Direct Integration |
| #9 | AI Provider for OpenAI | 64 | 33 | 2 | 50k+ | | | Exception output is not escaped |
| #10 | AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation | 55 | 66 | 25 | 1k+ | | | Text Domain Mismatch |
| #11 | AI Assistant for Elementor – Auto Content Writer, OpenAI, ChatGPT | 55 | 151 | 24 | 300 | | | Text Domain Mismatch |
| #12 | Auto Alt Text | 42 | 59 | 20 | 4k+ | | | Exception output is not escaped |
| #13 | AISEO | 31 | 646 | 205 | 1k+ | | | Text Domain Mismatch |
| #14 | AI ChatBot with ChatGPT and Content Generator by AYS | 31 | 170 | 391 | 300 | | | Non-prefixed global variable |
| #15 | ContentBot AI Writer (AI Content) | 30 | 317 | 69 | 400 | | | rand rand |
| #16 | PixelYourSite – Your smart PIXEL (TAG) & API Manager | 24 | 1,701 | 3,040 | 400k+ | | | Non-prefixed namespace |
| #17 | AI Engine – The Chatbot, AI Framework & MCP for WordPress | 23 | 455 | 667 | 90k+ | | | error log error log |
| #18 | Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | 23 | 9,584 | 27,731 | 1k+ | | | Non-prefixed global variable |
| #19 | AI Infographic Maker | 21 | 1,311 | 456 | 600 | | | Output is not escaped |
