Plugins
19
Active Installs
12m+
Average Score
51
Findings
5k+
Most Installed
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Classic Editor | 63 | 17 | 7 | 9m+ | Unsafe printing function | ||
| #2 | WordPress Importer | 25 | 238 | 110 | 2m+ | Output is not escaped | ||
| #3 | Gutenberg | 24 | 638 | 329 | 300k+ | Missing direct file access protection | ||
| #4 | Health Check & Troubleshooting | 35 | 264 | 238 | 300k+ | Missing Arg Domain | ||
| #5 | Two Factor | 42 | 18 | 70 | 100k+ | Nonce verification recommended | ||
| #6 | Secure Custom Fields | 23 | 240 | 1,377 | 90k+ | Non-prefixed function | ||
| #7 | AI | 73 | 11 | 190 | 40k+ | Non-prefixed namespace | ||
| #8 | AI Provider for Anthropic | 78 | 13 | 2 | 40k+ | Exception output is not escaped | ||
| #9 | AI Provider for Google | 65 | 32 | 2 | 40k+ | Exception output is not escaped | ||
| #10 | AI Provider for OpenAI | 66 | 30 | 1 | 40k+ | Exception output is not escaped | ||
| #11 | Create Block Theme | 35 | 43 | 5 | 20k+ | unlink unlink | ||
| #12 | Debug Bar | 41 | 64 | 25 | 20k+ | Output is not escaped | ||
| #13 | Theme Check | 67 | 147 | 6 | 20k+ | Missing Translators Comment | ||
| #14 | Plugin Check (PCP) | 0 | 128 | 140 | 10k+ | Non-prefixed global variable | ||
| #15 | Tumblr Importer | 91 | 7 | 9 | 10k+ | wp function not compatible with requires wp | ||
| #16 | Press This | 70 | 1 | 44 | 5k+ | Non-prefixed hook name | ||
| #17 | SQLite Database Integration | 34 | 124 | 79 | 4k+ | Exception output is not escaped | ||
| #18 | Substack Importer | 39 | 33 | 33 | 1k+ | Missing nonce verification | ||
| #19 | Edit Image Thumbnails Separately | 98 | 2 | 1 | 400 | Missing direct file access protection |
