| #1 | Superb Addons: Blocks, Patterns, Pre-built Pages, Sliders, Popups, Free Forms, Animations & More | 100 | | 0 | 80k+ | | | No open findings |
| #2 | Email Marketing for WordPress and WooCommerce – Retainful | 100 | | 2 | 500 | | | trademarked term |
| #3 | Advanced Popups | 99 | 4 | 0 | 60k+ | | | wp function not compatible with requires wp |
| #4 | WebToffee eCommerce Marketing Automation – Email marketing, Popups, Email customizer | 98 | 2 | 12 | 10k+ | | | Non-prefixed class |
| #5 | Alligator Popup | 98 | 2 | 1 | 2k+ | | | outdated tested upto header |
| #6 | Alligator Menu Popup | 87 | 4 | 1 | 600 | | | Missing Arg Domain |
| #7 | Boxzilla – WordPress Popup Builder | 79 | 4 | 64 | 20k+ | | | Non-prefixed global variable |
| #8 | PopupAlly | 75 | 40 | 10 | 2k+ | | | Missing direct file access protection |
| #9 | Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. | 70 | 3 | 1,446 | 3k+ | | | Non-prefixed global variable |
| #10 | Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder | 66 | 45 | 689 | 700k+ | | | Non-prefixed hook name |
| #11 | Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms | 48 | 34 | 14 | 800 | | | Non Singular String Literal Domain |
| #12 | HollerBox — Fast & Effective Popups & Lead-Generation | 35 | 77 | 92 | 2k+ | | | Output is not escaped |
| #13 | WP Popup Builder – Popup Forms and Marketing Lead Generation | 34 | 357 | 143 | 3k+ | | | Text Domain Mismatch |
| #14 | Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation | 32 | 462 | 41 | 1m+ | | | Text Domain Mismatch |
| #15 | Pop-up | 31 | 103 | 91 | 10k+ | | | Output is not escaped |
| #16 | YITH WooCommerce Popup | 30 | 395 | 1,551 | 2k+ | | | Non-prefixed global variable |
| #17 | WP Popups – WordPress Popup builder | 25 | 440 | 342 | 30k+ | | | Output is not escaped |
| #18 | Popup Box – Create Countdown, Coupon, Video, Contact Form Popups | 24 | 482 | 1,253 | 50k+ | | | Non-prefixed global variable |
| #19 | Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content | 24 | 237 | 291 | 20k+ | | | error log print r |
| #20 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | | | Output is not escaped |
| #21 | AI Popup | 23 | 1,224 | 636 | 400 | | | Text Domain Mismatch |
| #22 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,625 | 2,458 | 10k+ | | | Output is not escaped |
| #23 | Smart Popup by Supsystic | 22 | 3,120 | 492 | 10k+ | | | Non Singular String Literal Domain |
