PluginScore

2fa WordPress Plugins with Most Issues

22 indexed plugins

Plugins

22

Active Installs

9m+

Average Score

43

Audited

22

Most Issues

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#2Security Plugin, Firewall & Malware Scanner with Auto Removal231,20478940k+Output is not escaped
#3Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820230k+Missing Translators Comment
#4Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention256176141m+Unsafe printing function
#5Login With Ajax – Fast Logins, 2FA, Redirects2362352010k+Output is not escaped
#6WP 2FA – Two-factor authentication for WordPress25255717100k+Non-prefixed global variable
#7Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195363793m+Missing Translators Comment
#8Login & Register Forms – Popup, Slider, Profile & WooCommerce2518352140k+Non-prefixed global variable
#9Wordfence Login Security2524841860k+Output is not escaped
#10WP Hide & Security Enhancer2712437550k+Input is not sanitized
#11Rublon Multi-Factor Authentication (MFA)30216160500Output is not escaped
#12OTP Login & Register Woocommerce341482021k+Missing nonce verification
#13Two Factor Authentication3510813920k+Output is not escaped
#14WP 2-step verification32154651k+Output is not escaped
#15Atomic Edge Security – Firewall, Malware Scan and Login Security4012184700Non-prefixed global variable
#16Advanced IP Blocker4094562k+Exception output is not escaped
#17Two Factor421870100k+Nonce verification recommended
#18Two Factor (2FA) Authentication via Email6112279k+Request data is not unslashed
#19WebAuthn Provider for Two Factor916141k+Missing Arg Domain
#20Trusona for WordPress9728500Non-prefixed constant
#21miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator)99610k+Non-prefixed constant
#22Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner…10011k+mismatched plugin name