| #1 | Click to Chat – HoliThemes | 100 | | 2 | 600k+ | | | mismatched plugin name |
| #2 | Pulsating Chat Button | 100 | | 0 | 3k+ | | | No open findings |
| #3 | Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist | 93 | 2 | 4 | 10k+ | | | Missing Version |
| #4 | Simple Chat Button | 91 | | 4 | 40k+ | | | Nonce verification recommended |
| #5 | Cresta Help Chat | 80 | 6 | 6 | 10k+ | | | Output is not escaped |
| #6 | Social Chat Widget (⚡ by Callbell) | 71 | 11 | 6 | 600 | | | Output is not escaped |
| #7 | Contact Form to Chat Apps | Click to Chat to Order – FormyChat | 63 | 30 | 134 | 3k+ | | | Direct Query |
| #8 | Get Chat App | 62 | 10 | 62 | 400 | | | Request data is not unslashed |
| #9 | Widget Click to Chat | 61 | 22 | 4 | 500 | | | Setting is missing a sanitization callback |
| #10 | Social Chat – Click To Chat App Button | 56 | 81 | 45 | 200k+ | | | Text Domain Mismatch |
| #11 | Notiqoo – Order Notification & Customer Chat for WooCommerce | 52 | 11 | 187 | 1k+ | | | Non-prefixed global variable |
| #12 | OneClick Chat to Order | 49 | 677 | 41 | 40k+ | | | Text Domain Mismatch |
| #13 | Chatbox Manager | 39 | 885 | 78 | 400 | | | Output is not escaped |
| #14 | Abandoned Checkout Recovery & Order Notifications for WooCommerce | 35 | 108 | 77 | 800 | | | Text Domain Mismatch |
| #15 | ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form | 34 | 34 | 189 | 1k+ | | | Non-prefixed global variable |
| #16 | WP Chat App | 27 | 120 | 274 | 100k+ | | | Alternative PHP tag found |
| #17 | Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty | 26 | 113 | 671 | 300k+ | | | Non-prefixed global variable |
| #18 | WANotifier for Forms and Actions | 26 | 309 | 280 | 1k+ | | | Text Domain Mismatch |
