| #1 | Booking Ultra Pro Appointments Booking Calendar Plugin | 21 | 761 | 2,083 | 400 | | | Request data is not unslashed |
| #2 | Booking System Trafft | 78 | 3 | 19 | 400 | | | Nonce verification recommended |
| #3 | Timetics – Appointment Booking Calendar & Scheduling System | 99 | 2 | 3 | 2k+ | | | wp function not compatible with requires wp |
| #4 | Social Engine | 28 | 132 | 89 | 600 | | | Exception output is not escaped |
| #5 | TrueBooker – Appointment Booking and Scheduler System | 25 | 529 | 2,743 | 600 | | | Non-prefixed global variable |
| #6 | Salon Booking System – Free Version | 22 | 655 | 620 | 2k+ | | | Missing direct file access protection |
| #7 | Sign In Scheduling Online Appointment Booking System | 95 | 8 | 2 | 800 | | | No Explicit Version |
| #8 | WPCal.io – Easy Meeting Scheduler | 23 | 694 | 595 | 900 | | | Direct Query |
| #9 | Koalendar – Easy Appointment Scheduling & Booking Plugin | 97 | 8 | 3 | 900 | | | wp function not compatible with requires wp |
| #10 | WPS Bookings for WooCommerce | 88 | 26 | 249 | 4k+ | | | Non-prefixed global variable |
| #11 | Hydra Booking — Appointment Scheduling & Booking Calendar | 25 | 238 | 707 | 2k+ | | | Non-prefixed global variable |
| #12 | LatePoint – Calendar Booking Plugin for Appointments and Events | 24 | 1,841 | 937 | 100k+ | | | Output is not escaped |
| #13 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin | 25 | 960 | 738 | 60k+ | | | Text Domain Mismatch |
| #14 | Shore Booking Widget | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #15 | Online Booking & Scheduling Calendar for WordPress by vcita | 27 | 473 | 161 | 1k+ | | | Output is not escaped |
| #16 | Content Update Scheduler | 89 | 2 | 17 | 2k+ | | | Non-prefixed global variable |
| #17 | Advanced Booking & Appointment System – Webba Booking Calendar | 23 | 1,615 | 3,300 | 2k+ | | | Non-prefixed global variable |
| #18 | Advanced Appointment Booking & Scheduling | 83 | 11 | 13 | 3k+ | | | Text Domain Mismatch |
| #19 | Setmore Appointments | 44 | 45 | 13 | 4k+ | | | Output is not escaped |
| #20 | Publish to Schedule | 37 | 195 | 43 | 4k+ | | | Text Domain Mismatch |
| #21 | EMC – Easily Embed Calendly Scheduling | 100 | | 0 | 10k+ | | | No open findings |
| #22 | SimplyBook.me – Booking and reservations calendar | 54 | 31 | 13 | 30k+ | | | Exception output is not escaped |
