Plugins
19
Active Installs
12m+
Average Score
52
Findings
5k+
Most Improved
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Gutenberg | 23 | 606 | 329 | 300k+ | Missing direct file access protection | ||
| #2 | AI | 81 | 11 | 79 | 30k+ | Non-prefixed global variable | ||
| #3 | AI Provider for Anthropic | 78 | 13 | 1 | 20k+ | Exception output is not escaped | ||
| #4 | AI Provider for Google | 65 | 32 | 1 | 20k+ | Exception output is not escaped | ||
| #5 | AI Provider for OpenAI | 76 | 15 | 1 | 20k+ | Exception output is not escaped | ||
| #6 | Classic Editor | 63 | 17 | 7 | 9m+ | Unsafe printing function | ||
| #7 | Create Block Theme | 35 | 43 | 5 | 20k+ | unlink unlink | ||
| #8 | Debug Bar | 41 | 64 | 25 | 20k+ | Output is not escaped | ||
| #9 | Edit Image Thumbnails Separately | 98 | 2 | 1 | 400 | Missing direct file access protection | ||
| #10 | Health Check & Troubleshooting | 35 | 264 | 238 | 300k+ | Missing Arg Domain | ||
| #11 | Plugin Check (PCP) | 0 | 128 | 132 | 10k+ | Exception output is not escaped | ||
| #12 | Press This | 70 | 1 | 44 | 5k+ | Non-prefixed hook name | ||
| #13 | Secure Custom Fields | 23 | 240 | 1,370 | 80k+ | Non-prefixed function | ||
| #14 | SQLite Database Integration | 29 | 161 | 89 | 3k+ | Exception output is not escaped | ||
| #15 | Substack Importer | 39 | 33 | 33 | 1k+ | Missing nonce verification | ||
| #16 | Theme Check | 67 | 143 | 6 | 20k+ | Missing Translators Comment | ||
| #17 | Tumblr Importer | 91 | 7 | 9 | 10k+ | wp function not compatible with requires wp | ||
| #18 | Two Factor | 42 | 18 | 70 | 100k+ | Nonce verification recommended | ||
| #19 | WordPress Importer | 25 | 238 | 110 | 2m+ | Output is not escaped |
