Most Installed Antispam WordPress Plugins
31 indexed plugins
Plugins
31
Active Installs
7m+
Average Score
48
Audited
31
Most Installed
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Akismet Anti-spam: Spam Protection | 35 | 33 | 99 | 6m+ | Non-prefixed global variable | ||
| #2 | Antispam Bee | 80 | 4 | 38 | 700k+ | Nonce verification recommended | ||
| #3 | CleanTalk Anti-Spam. Spam Firewall & Bot protection | 24 | 818 | 1,092 | 200k+ | Missing nonce verification | ||
| #4 | reCaptcha by BestWebSoft | 29 | 474 | 272 | 100k+ | Text Domain Mismatch | ||
| #5 | hCaptcha for WP | 42 | 115 | 18 | 70k+ | Exception output is not escaped | ||
| #6 | Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter | 31 | 57 | 196 | 50k+ | Nonce verification recommended | ||
| #7 | Maspik – Ultimate Spam Protection | 28 | 212 | 862 | 30k+ | Missing nonce verification | ||
| #8 | Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms | 22 | 493 | 295 | 10k+ | Text Domain Mismatch | ||
| #9 | AntiSpam for Contact Form 7 | 86 | 14 | 8 | 10k+ | Text Domain Mismatch | ||
| #10 | CryptX | 69 | 11 | 30 | 10k+ | Missing nonce verification | ||
| #11 | WPBruiser {no- Captcha anti-Spam} | 25 | 646 | 259 | 10k+ | Non Singular String Literal Domain | ||
| #12 | Friendly Captcha for WordPress | 35 | 192 | 62 | 9k+ | Output is not escaped | ||
| #13 | reCAPTCHA in WP comments form | 31 | 264 | 60 | 8k+ | Output is not escaped | ||
| #14 | WP Mailto Links – Protect Email Addresses | 35 | 95 | 69 | 8k+ | Output is not escaped | ||
| #15 | Captcha Them All | 21 | 300 | 323 | 6k+ | Output is not escaped | ||
| #16 | Spam Destroyer | 37 | 63 | 43 | 6k+ | rand rand | ||
| #17 | Kama SpamBlock | 64 | 29 | 7 | 5k+ | Short PHP open tag found | ||
| #18 | Block List Updater | 99 | 1 | 0 | 4k+ | outdated tested upto header | ||
| #19 | Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant | 30 | 264 | 221 | 4k+ | Non Singular String Literal Text | ||
| #20 | ActiveLayer Anti-Spam: Spam Protection for Forms & Comments | 96 | 2 | 3k+ | Database parameter is not escaped | |||
| #21 | La Sentinelle antispam | 40 | 88 | 46 | 3k+ | Output is not escaped | ||
| #22 | No-Bot Registration | 40 | 112 | 42 | 2k+ | Unsafe printing function | ||
| #23 | Antispam for Elementor Forms | 91 | 3 | 3 | 1k+ | Missing Translators Comment | ||
| #24 | Human Presence – Stop Form Spam Without ReCaptcha | 33 | 54 | 65 | 1k+ | Request data is not unslashed | ||
| #25 | Honeypot Anti Spam for Forminator Forms | 75 | 4 | 7 | 1k+ | Missing nonce verification | ||
| #26 | FV Antispam | 26 | 332 | 239 | 900 | Output is not escaped | ||
| #27 | Analytics Spam Blocker | 37 | 76 | 22 | 800 | Unsafe printing function | ||
| #28 | Honeypot Plus for Contact Form 7 | 77 | 3 | 17 | 700 | Missing nonce verification | ||
| #29 | WP referrer spam blacklist (fight 2040+ Referrer Spammers in (Google/Matomo) Analytics) | 69 | 9 | 24 | 700 | Non-prefixed constant | ||
| #30 | CloudFilt Bot & Spam Protection | 51 | 11 | 22 | 600 | Output is not escaped | ||
| #31 | Antispam | 41 | 11 | 41 | 400 | Missing nonce verification |
