| #1 | Easy Optimizer – PageSpeed, Cache & Core Web Vitals (Unused CSS, Delay JS, Lazy Load) | 24 | 206 | 521 | 500 | | | Direct Query |
| #2 | WP YouTube Lyte | 28 | 205 | 178 | 20k+ | | | Non-prefixed global variable |
| #3 | DietPress | 100 | | 1 | 2k+ | | | trademarked term |
| #4 | Instant Back/Forward | 99 | | 5 | 10k+ | | | Non-prefixed hook name |
| #5 | Optimization Detective | 100 | | 1 | 60k+ | | | readme reserved contributors |
| #6 | BerqWP – All-In-One Optimization for Core Web Vitals, Cache, CDN, Images, CSS & JavaScript | 25 | 203 | 547 | 4k+ | | | Non-prefixed global variable |
| #7 | QuickWebP – WebP & AVIF Image Optimizer, Compression & SEO for WordPress | 99 | 1 | 3 | 8k+ | | | invalid tested upto minor |
| #8 | W3 Total Cache | 23 | 307 | 678 | 900k+ | | | Non-prefixed global variable |
| #9 | LiteSpeed Cache | 35 | 282 | 889 | 7m+ | | | Non-prefixed global variable |
| #10 | Simply Static – The Static Site Generator | 25 | 190 | 534 | 30k+ | | | Non-prefixed hook name |
| #11 | Breeze Cache | 25 | 219 | 801 | 400k+ | | | Non-prefixed global variable |
| #12 | WP Fastest Cache – WordPress Cache Plugin | 24 | 541 | 753 | 1m+ | | | Unsafe printing function |
| #13 | LWS Optimize – All-in-One Speed Booster & Cache Tools | 27 | 35 | 534 | 10k+ | | | Non-prefixed global variable |
| #14 | Docket Cache – Object Cache Accelerator | 25 | 333 | 481 | 20k+ | | | Output is not escaped |
| #15 | Seraphinite Accelerator | 22 | 595 | 255 | 50k+ | | | Output is not escaped |
| #16 | Hosting Benchmark tool | 30 | 224 | 130 | 4k+ | | | rand rand |
| #17 | SQLite Object Cache | 100 | | 2 | 10k+ | | | ABSPATHDetected |
| #18 | Clear Cache Everywhere | 75 | 7 | 20 | 800 | | | Non-prefixed hook name |
| #19 | ezCache | 26 | 127 | 284 | 10k+ | | | Direct Query |
| #20 | Speed Up – Lazy Load | 100 | | 0 | 500 | | | No open findings |
| #21 | Speed Up – JavaScript To Footer | 100 | | 0 | 1k+ | | | No open findings |
| #22 | Lightweight Accordion | 92 | 2 | 3 | 10k+ | | | Non-prefixed function |
| #23 | WPGraphQL Smart Cache | 71 | 87 | 9 | 6k+ | | | Text Domain Mismatch |
| #24 | Embed Privacy | 35 | 32 | 67 | 10k+ | | | slow db query meta key |
| #25 | Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | 22 | 2,854 | 1,269 | 50k+ | | | Text Domain Mismatch |
| #26 | NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization | 23 | 311 | 635 | 90k+ | | | Output is not escaped |
| #27 | Freesoul Deactivate Plugins – Disable plugins on individual WordPress pages | 32 | 55 | 785 | 8k+ | | | Nonce verification recommended |
| #28 | Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN | 24 | 3,408 | 866 | 70k+ | | | Text Domain Mismatch |
| #29 | Cloudinary – Deliver Images and Videos at Scale | 72 | 691 | 134 | 5k+ | | | Text Domain Mismatch |
| #30 | FastPixel Cache – Optimize Page Speed: Compress Images, Minify, Clean Database & CDN | 33 | 52 | 342 | 4k+ | | | Request data is not unslashed |
| #31 | Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals | 25 | 143 | 357 | 60k+ | | | Input is not sanitized |
| #32 | ManageWP Worker | 23 | 506 | 565 | 1m+ | | | Non-prefixed class |
| #33 | Manage – Centralized site maintenance and monitoring | 95 | 5 | 47 | 90k+ | | | Direct Query |
| #34 | Jetpack – WP Security, Backup, Speed, & Growth | 22 | 2,975 | 1,348 | 3m+ | | | Text Domain Mismatch |
| #35 | Core Web Vitals & PageSpeed Booster | 100 | | 0 | 1k+ | | | No open findings |
| #36 | Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance | 30 | 173 | 479 | 100k+ | | | Interpolated SQL is not prepared |
| #37 | Falcon – WordPress Optimizations & Tweaks | 62 | 47 | 66 | 2k+ | | | Short PHP open tag found |
| #38 | The Cache Purger | 51 | 16 | 16 | 1k+ | | | Non Singular String Literal Text |
| #39 | JCH Optimize | 22 | 1,145 | 136 | 4k+ | | | Output is not escaped |
| #40 | Cache Using Gzip | 100 | | 0 | 400 | | | No open findings |
| #41 | WP Remove Query Strings From Static Resources | 99 | | 4 | 3k+ | | | trademarked term |
| #42 | Staatic – Static Site Generator for WordPress | 31 | 420 | 195 | 3k+ | | | SQL query is not prepared |
| #43 | Disabler | 64 | 212 | 38 | 900 | | | Text Domain Mismatch |
| #44 | Image Optimization – Compress Images and Convert to WebP or AVIF | 87 | 15 | 24 | 1m+ | | | Missing Translators Comment |
| #45 | Modern Image Formats | 100 | | 1 | 100k+ | | | readme reserved contributors |
| #46 | atec Cache APCu | 81 | 41 | 21 | 3k+ | | | wp function not compatible with requires wp |
| #47 | WP Compress – Instant Performance & Speed Optimization | 21 | 3,367 | 3,253 | 10k+ | | | Non Singular String Literal Domain |
| #48 | Plugin Detective – Troubleshooting Conflicts | 98 | 6 | 3 | 5k+ | | | Missing direct file access protection |
| #49 | View Transitions | 99 | | 3 | 10k+ | | | Non-prefixed constant |
| #50 | Performance Lab | 99 | | 21 | 100k+ | | | Text Domain Mismatch |