RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#201Insert Headers And Footers3483113300k+Non-prefixed global variable
#202WP Mail Logging3476258300k+Nonce verification recommended
#203WP Reset96831300k+Non-prefixed global variable
#204WP Rollback – Rollback Plugins and Themes9819300k+Non-prefixed hook name
#205WP Activity Log2796230300k+Nonce verification recommended
#206SEOPress – AI SEO Plugin & On-site SEO32138429300k+Non-prefixed global variable
#207DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer921011200k+Missing direct file access protection
#208Admin and Site Enhancements (ASE)23136331200k+Nonce verification recommended
#209Adminimize29296691200k+Non-prefixed global variable
#210Advanced Google reCAPTCHA97315200k+Non-prefixed global variable
#211All 404 Redirect to Homepage25140301200k+date date
#212Activity Log – Monitor & Record User Changes3881149200k+Nonce verification recommended
#213Astra Widgets861015200k+Missing direct file access protection
#214The SEO Framework – Fast, Automated, Effortless.31363609200k+Non-prefixed global variable
#215JetBackup – Backup, Restore & Migrate101,563149200k+Exception output is not escaped
#216Black Studio TinyMCE Widget403928200k+Output is not escaped
#217Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative)6933379200k+Direct Query
#218Call Now Button – The #1 Click to Call Button for WordPress371,2735200k+Exception output is not escaped
#219CartFlows – Funnel Builder & Checkout Plugin for WooCommerce21462656200k+Text Domain Mismatch
#220CleanTalk Anti-Spam. Spam Firewall & Bot protection248251,079200k+Missing nonce verification
#221Cloudflare352785200k+Non-prefixed namespace
#222CMP – Coming Soon & Maintenance Plugin by NiteoThemes249491,336200k+Non-prefixed global variable
#223Crowdsignal Forms1000200k+No open findings
#224Smash Balloon Social Post Feed – Simple Social Feeds for WordPress25554982200k+Output is not escaped
#225Custom Post Type Permalinks3584200k+Setting is missing a sanitization callback
#226Disable XML-RPC10010200k+Missing direct file access protection
#227Firelight Lightbox517897200k+Non-prefixed global variable
#228Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns24120684200k+Non-prefixed global variable
#229Instant Indexing for Google351362200k+Non-prefixed global variable
#230Favicon by RealFaviconGenerator971018200k+Non-prefixed constant
#231FileBird – WordPress Media Library Folders & File Manager24239377200k+wp function not compatible with requires wp
#232FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#233Force Regenerate Thumbnails351217200k+unlink unlink
#234GenerateBlocks9798200k+file system operations is writable
#235Header and Footer Scripts9921200k+Non-prefixed class
#236Head, Footer and Post Injections55952200k+Non-prefixed global variable
#237Imsanity353229200k+Direct Query
#238iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more60405271200k+Text Domain Mismatch
#239InfiniteWP Client222,2861,812200k+Exception output is not escaped
#240Jetpack Boost – Website Speed, Performance and Critical CSS29659247200k+Text Domain Mismatch
#241Kadence Starter Templates — Predesigned Website Templates28312215200k+Missing Arg Domain
#242Layout Grid Block9851200k+Missing direct file access protection
#243HubSpot All-In-One Marketing – Forms, Popups, Live Chat9824200k+trademarked term
#244LoginPress | wp-login Custom Login Page Customizer55125308200k+Non-prefixed function
#245Mailchimp for WooCommerce24523663200k+Non-prefixed global variable
#246MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall825522200k+Missing direct file access protection
#247Microsoft Clarity3648163200k+Nonce verification recommended
#248Migrate Guru – Site Migration & Cloning8178200k+Database parameter is not escaped
#249MW WP Form27334219200k+Output is not escaped
#250Newsletter – Send awesome emails from WordPress248982,217200k+Non-prefixed global variable