| #1 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,858 | 1,270 | 50k+ | | | Text Domain Mismatch |
| #2 | W3 Total Cache | 25 | 617 | 1,345 | 900k+ | | | Non-prefixed global variable |
| #3 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,407 | 412 | 5k+ | | | Missing Translators Comment |
| #4 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | | Unsafe printing function |
| #5 | LWS Optimize – All-in-One Speed Booster & Cache Tools | 25 | 430 | 764 | 20k+ | | | Non-prefixed global variable |
| #6 | LiteSpeed Cache | 35 | 286 | 893 | 7m+ | | | Non-prefixed global variable |
| #7 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | 22 | 513 | 601 | 80k+ | | | Non-prefixed global variable |
| #8 | JCH Optimize | 21 | 953 | 133 | 4k+ | | | Output is not escaped |
| #9 | Seraphinite Accelerator | 22 | 594 | 255 | 50k+ | | | Output is not escaped |
| #10 | WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100) | 24 | 482 | 189 | 2k+ | | | Output is not escaped |
| #11 | Code Profiler – WordPress Performance Profiling and Debugging Made Easy | 22 | 265 | 400 | 8k+ | | | Non-prefixed global variable |
| #12 | Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance | 30 | 164 | 439 | 100k+ | | | Interpolated SQL is not prepared |
| #13 | A2 Optimized WP – Turbocharge and secure your WordPress site | 24 | 271 | 231 | 60k+ | | | Missing Arg Domain |
| #14 | Autoptimize | 23 | 288 | 191 | 800k+ | | | Output is not escaped |
| #15 | Database Cleaner | 29 | 135 | 297 | 10k+ | | | Direct Query |
| #16 | Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score | 20 | 147 | 231 | 3k+ | | | Exception output is not escaped |
| #17 | PNG to JPG | 37 | 130 | 173 | 9k+ | | | Interpolated SQL is not prepared |
| #18 | AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization | 31 | 91 | 133 | 2k+ | | | Output is not escaped |
| #19 | WP-Sweep | 74 | 1 | 201 | 100k+ | | | Direct Query |
| #20 | FlyWP Helper – Page Cache, Page Optimization, Emails for FlyWP Server Control Panel | 40 | 20 | 81 | 4k+ | | | Non-prefixed global variable |
| #21 | Images to WebP | 37 | 39 | 50 | 9k+ | | | curl curl setopt |
| #22 | Lazy Load Optimizer | 41 | 63 | 26 | 3k+ | | | Unsafe printing function |
| #23 | WP Performance Score Booster – Optimize Speed, Enable Cache & Page Preload | 39 | 59 | 27 | 10k+ | | | Unsafe printing function |
| #24 | Better image sizes | 46 | 45 | 23 | 2k+ | | | Text Domain Mismatch |
| #25 | Falcon – WordPress Optimizations & Tweaks | 69 | 29 | 21 | 2k+ | | | Short PHP open tag found |
| #26 | Cachify | 84 | 9 | 36 | 9k+ | | | Non-prefixed global variable |
| #27 | Debloat – Remove Unused CSS, Optimize JS | 58 | 24 | 20 | 30k+ | | | Nonce verification recommended |
| #28 | Specify Missing Image Dimensions | 45 | 21 | 12 | 1k+ | | | Unsafe printing function |
| #29 | Disable and Remove Google Fonts | GDPR & DSGVO friendly | 35 | 21 | 8 | 100k+ | | | Missing Translators Comment |
| #30 | Aruba HiSpeed Cache | 97 | 12 | 5 | 100k+ | | | wp function not compatible with requires wp |
| #31 | Optimize Images Resizing | 83 | 12 | 4 | 6k+ | | | Unsafe printing function |
| #32 | Offload, AI & Optimize with Cloudflare Images | 99 | 6 | 1 | 1k+ | | | wp function not compatible with requires wp |