| #1 | EMC – Easily Embed Calendly Scheduling | 100 | | 0 | 10k+ | | No open findings |
| #2 | Shore Booking Widget | 99 | 1 | 0 | 1k+ | | outdated tested upto header |
| #3 | Timetics – Appointment Booking Calendar & Scheduling System | 99 | 2 | 3 | 2k+ | | wp function not compatible with requires wp |
| #4 | Content Update Scheduler | 89 | 2 | 17 | 2k+ | | Non-prefixed global variable |
| #5 | Advanced Appointment Booking & Scheduling | 83 | 11 | 13 | 3k+ | | Text Domain Mismatch |
| #6 | WPS Bookings for WooCommerce | 69 | 30 | 250 | 4k+ | | Non-prefixed global variable |
| #7 | SimplyBook.me – Booking and reservations calendar | 54 | 31 | 13 | 30k+ | | Exception output is not escaped |
| #8 | Setmore Appointments | 44 | 45 | 13 | 4k+ | | Output is not escaped |
| #9 | Publish to Schedule | 37 | 195 | 43 | 4k+ | | Text Domain Mismatch |
| #10 | Online Booking & Scheduling Calendar for WordPress by vcita | 27 | 473 | 161 | 1k+ | | Output is not escaped |
| #11 | Hydra Booking — Appointment Scheduling & Booking Calendar | 25 | 238 | 707 | 2k+ | | Non-prefixed global variable |
| #12 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin | 25 | 960 | 738 | 60k+ | | Text Domain Mismatch |
| #13 | LatePoint – Calendar Booking Plugin for Appointments and Events | 24 | 1,837 | 931 | 100k+ | | Output is not escaped |
| #14 | Advanced Booking & Appointment System – Webba Booking Calendar | 23 | 1,615 | 3,300 | 2k+ | | Non-prefixed global variable |
| #15 | Salon Booking System – Free Version | 22 | 650 | 619 | 3k+ | | Missing direct file access protection |
