RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101Forminator Forms – Contact Form, Payment Form & Custom Form Builder248261,314600k+Non-prefixed global variable
#102Header Footer Code Manager3681180600k+Non-prefixed global variable
#103Hello Dolly8592600k+Output is not escaped
#104Kadence Blocks — Page Builder Toolkit for Gutenberg Editor23552,127600k+Non-prefixed global variable
#105MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor3063227600k+Non-prefixed global variable
#106Ninja Forms – The Contact Form Builder That Grows With You237541,525600k+Nonce verification recommended
#107Post Types Order424543600k+wp function not compatible with requires wp
#108Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0112,530600k+Text Domain Mismatch
#109SpeedyCache – Cache, Optimization, Performance3165118600k+Input is not validated
#110Sucuri Security – Auditing, Malware Scanner and Security Hardening94525600k+Missing direct file access protection
#111TablePress – Tables in WordPress made easy258472,174600k+Non-prefixed global variable
#112Under Construction3530600k+Hidden files included
#113WooCommerce Tax (formerly WooCommerce Shipping & Tax)30103198600k+Non-prefixed class
#114WP Statistics – Simple, privacy-friendly Google Analytics alternative256102,465600k+Non-prefixed global variable
#115BackWPup – WordPress Backup & Restore Plugin3512779500k+Non-prefixed global variable
#116Broken Link Checker25727600500k+Output is not escaped
#117Disable Gutenberg432347500k+Nonce verification recommended
#118Easy WP SMTP – WordPress SMTP and Email Logs: Gmail, Office 365, Outlook, Custom SMTP, and more1532163500k+Direct Query
#119Extendify35117168500k+Non-prefixed global variable
#120GoSMTP – SMTP for WordPress395942500k+Output is not escaped
#121Kirki – Freeform Page Builder, Website Builder & Customizer351773500k+Nonce verification recommended
#122MailPoet – Newsletters, Email Marketing, and Automation23931719500k+Exception output is not escaped
#123Meta Box96516500k+Non-prefixed hook name
#124Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non-prefixed global variable
#125Ocean Extra231,4942,106500k+Non-prefixed global variable
#126PixelYourSite – Your smart PIXEL (TAG) & API Manager241,1602,407500k+Non-prefixed namespace
#127Ally – Web Accessibility & Usability414735500k+Output is not escaped
#128SiteGuard WP Plugin24359350500k+Output is not escaped
#129SiteSEO – SEO Simplified4120110500k+Nonce verification recommended
#130SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator29336198500k+Text Domain Mismatch
#131Category Order and Taxonomy Terms Order763510500k+wp function not compatible with requires wp
#132Converter for Media – Optimize images | Convert WebP & AVIF3513353500k+curl curl setopt
#133WP-PageNavi358495500k+Non Singular String Literal Domain
#134AMP4363362400k+Non-prefixed hook name
#135Breeze Cache25217790400k+Non-prefixed global variable
#136Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty26113671400k+Non-prefixed global variable
#137CookieAdmin – Cookie Consent Banner374386400k+Nonce verification recommended
#138Custom Fonts – Host Your Fonts Locally771420400k+Request data is not unslashed
#139Meta for WooCommerce3466186400k+Non-prefixed hook name
#140Font Awesome89213400k+Missing direct file access protection
#141GA Google Analytics – Connect Google Analytics to WordPress424630400k+Output is not escaped
#142Happy Addons for Elementor23573444400k+Output is not escaped
#143WP Armour – Honeypot Anti Spam405566400k+Missing nonce verification
#144Intuitive Custom Post Order751996400k+Direct Query
#145Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery232,119986400k+Text Domain Mismatch
#146Meta pixel for WordPress349138400k+Exception output is not escaped
#147Page Builder: Pagelayer – Drag and Drop website builder24769556400k+Output is not escaped
#148Redis Object Cache28151103400k+Exception output is not escaped
#149Shortcodes Ultimate – Content Elements246561,552400k+Non-prefixed global variable
#150Page Builder by SiteOrigin31226214400k+Output is not escaped