Plugins
24
Active Installs
1m+
Average Score
56
Findings
3k+
Most Installed
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Disable Gutenberg | 43 | 23 | 47 | 500k+ | Nonce verification recommended | ||
| #2 | GA Google Analytics – Connect Google Analytics to WordPress | 42 | 46 | 30 | 400k+ | Output is not escaped | ||
| #3 | BBQ Firewall – Fast & Powerful Firewall Security | 44 | 17 | 17 | 100k+ | Output is not escaped | ||
| #4 | Blackhole for Bad Bots | 39 | 123 | 69 | 30k+ | Output is not escaped | ||
| #5 | Disable WP REST API | 93 | 7 | 30k+ | Missing nonce verification | |||
| #6 | Disable Lazy Load | 100 | 1 | 10k+ | plugin header nonexistent domain path | |||
| #7 | Disable Media Sizes | 54 | 14 | 7 | 10k+ | Output is not escaped | ||
| #8 | Disable WP Sitemaps | 99 | 4 | 10k+ | trademarked term | |||
| #9 | Head Meta Data | 55 | 19 | 42 | 10k+ | Non-prefixed function | ||
| #10 | User Submitted Posts – Enable Users to Submit Posts from the Front End | 26 | 699 | 396 | 10k+ | Text Domain Mismatch | ||
| #11 | Theme Switcha – Easily Switch Themes for Development and Testing | 43 | 42 | 53 | 7k+ | Output is not escaped | ||
| #12 | Dashboard Widgets Suite | 36 | 206 | 124 | 4k+ | Output is not escaped | ||
| #13 | Simple Blog Stats | 53 | 25 | 76 | 4k+ | Non-prefixed function | ||
| #14 | Disable Application Passwords | 100 | 1 | 2k+ | plugin header nonexistent domain path | |||
| #15 | Disable Responsive Images Complete | 100 | 0 | 2k+ | No open findings | |||
| #16 | Prismatic | 42 | 61 | 29 | 2k+ | Output is not escaped | ||
| #17 | Simple Ajax Chat – Add a Fast, Secure Chat Box | 32 | 108 | 266 | 2k+ | Output is not escaped | ||
| #18 | Simple Download Counter | 42 | 58 | 46 | 2k+ | Output is not escaped | ||
| #19 | Banhammer – Monitor Site Traffic, Block Bad Users and Bots | 37 | 104 | 174 | 1k+ | Output is not escaped | ||
| #20 | Custom Fields for Gutenberg | 42 | 24 | 24 | 1k+ | Output is not escaped | ||
| #21 | Simple Login Notification | 45 | 13 | 22 | 1k+ | Request data is not unslashed | ||
| #22 | WP Cron HTTP Auth | 74 | 12 | 7 | 1k+ | Output is not escaped | ||
| #23 | Simple Statistics for Feeds | 40 | 64 | 131 | 800 | Nonce verification recommended | ||
| #24 | Host Header Injection Fix | 70 | 9 | 8 | 400 | Output is not escaped |
