| #1 | LiteSpeed Cache | 35 | 286 | 893 | 7m+ | | | Non-prefixed global variable |
| #2 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | | Unsafe printing function |
| #3 | W3 Total Cache | 25 | 617 | 1,345 | 900k+ | | | Non-prefixed global variable |
| #4 | Autoptimize | 23 | 288 | 191 | 800k+ | | | Output is not escaped |
| #5 | SpeedyCache – Cache, Optimization, Performance | 31 | 65 | 118 | 600k+ | | | Input is not validated |
| #6 | Fast Velocity Minify | 24 | 282 | 256 | 40k+ | | | Unsafe printing function |
| #7 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | 22 | 513 | 601 | 80k+ | | | Non-prefixed global variable |
| #8 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,858 | 1,270 | 50k+ | | | Text Domain Mismatch |
| #9 | Async JavaScript | 37 | 357 | 79 | 70k+ | | | Unsafe printing function |
| #10 | Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals | 25 | 137 | 353 | 60k+ | | | Input is not sanitized |
| #11 | Speed Booster Pack ⚡ PageSpeed Optimization Suite | 27 | 108 | 187 | 9k+ | | | Missing Translators Comment |
| #12 | Aruba HiSpeed Cache | 97 | 12 | 5 | 100k+ | | | wp function not compatible with requires wp |
| #13 | WP Meteor Website Speed Optimization Addon | 40 | 34 | 19 | 20k+ | | | Output is not escaped |
| #14 | Seraphinite Accelerator | 22 | 594 | 255 | 50k+ | | | Output is not escaped |
| #15 | Insights from Google PageSpeed | 32 | 414 | 475 | 20k+ | | | Text Domain Mismatch |
| #16 | JCH Optimize | 21 | 953 | 133 | 4k+ | | | Output is not escaped |
| #17 | AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization | 31 | 91 | 133 | 2k+ | | | Output is not escaped |
| #18 | CSS JS Manager, Async JavaScript, Defer Render Blocking CSS | 34 | 76 | 106 | 1k+ | | | Input is not validated |
| #19 | BerqWP – Automatic WordPress Website Speed Optimization | 25 | 198 | 501 | 3k+ | | | Non-prefixed global variable |
| #20 | Autoclear Autoptimize Cache | 68 | 16 | 3 | 9k+ | | | Output is not escaped |
| #21 | Assets manager, dequeue scripts, dequeue styles for WordPress | 24 | 592 | 255 | 2k+ | | | Output is not escaped |
| #22 | True Lazy Analytics | 75 | 11 | 13 | 6k+ | | | Nonce verification recommended |
| #23 | Helper Lite for PageSpeed | 98 | 5 | 4 | 3k+ | | | Missing Arg Domain |
| #24 | WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100) | 24 | 482 | 189 | 2k+ | | | Output is not escaped |
| #25 | Preload Featured Images | 91 | 2 | 2 | 1k+ | | | Output is not escaped |
| #26 | Specify Missing Image Dimensions | 45 | 21 | 12 | 1k+ | | | Unsafe printing function |
