API WordPress Plugins That Need Review
39 indexed plugins
Plugins
39
Active Installs
594k+
Average Score
69
Audited
39
Needs Review
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | GS Behance Portfolio – Display Projects, Gallery & Slider | 24 | 855 | 1,617 | 400 | Non-prefixed global variable | ||
| #2 | Show Eventbrite Events – Event Feed for Eventbrite | 25 | 595 | 1,525 | 800 | Non-prefixed global variable | ||
| #3 | Mailgun for WordPress | 31 | 144 | 75 | 80k+ | Unsafe printing function | ||
| #4 | Envato Toolkit | 33 | 219 | 69 | 5k+ | Output is not escaped | ||
| #5 | Air WP Sync – Airtable to WordPress | 35 | 37 | 45 | 1k+ | Non-prefixed hook name | ||
| #6 | Log HTTP Requests | 35 | 7 | 18 | 2k+ | Interpolated SQL is not prepared | ||
| #7 | WPGraphQL for ACF | 35 | 6 | 18 | 10k+ | Output is not escaped | ||
| #8 | POEditor | 37 | 78 | 140 | 500 | Output is not escaped | ||
| #9 | WP REST API – OAuth 1.0a Server | 38 | 100 | 85 | 8k+ | Text Domain Mismatch | ||
| #10 | Simple JWT Login – Allows you to use JWT on REST endpoints. | 38 | 712 | 95 | 4k+ | Output is not escaped | ||
| #11 | REST API Custom Fields | 40 | 44 | 16 | 800 | Text Domain Mismatch | ||
| #12 | WP OpenAPI | 45 | 26 | 22 | 400 | Output is not escaped | ||
| #13 | REST API Log | 51 | 44 | 95 | 5k+ | Non-prefixed hook name | ||
| #14 | REST XML-RPC Data Checker | 54 | 14 | 45 | 900 | Input is not sanitized | ||
| #15 | Custom API for WP | 59 | 173 | 16 | 1k+ | wp function not compatible with requires wp | ||
| #16 | WP REST API Controller | 64 | 8 | 22 | 8k+ | Nonce verification recommended | ||
| #17 | WP REST Cache | 64 | 11 | 113 | 10k+ | Direct Query | ||
| #18 | Disable REST API | 65 | 12 | 15 | 90k+ | Output is not escaped | ||
| #19 | WPGraphQL Smart Cache | 71 | 87 | 9 | 7k+ | Text Domain Mismatch | ||
| #20 | JSON API Auth | 79 | 5 | 11 | 700 | Non-prefixed function | ||
| #21 | WordPress REST API (Version 2) | 82 | 476 | 13 | 10k+ | Missing Arg Domain | ||
| #22 | WP Consent API | 86 | 2 | 10 | 200k+ | Input is not sanitized | ||
| #23 | WP REST API Meta Endpoints | 88 | 50 | 3 | 1k+ | Missing Arg Domain | ||
| #24 | Taxonomy Metadata | 89 | 4 | 9 | 4k+ | Direct Query | ||
| #25 | WPGet API – Connect to any external REST API | 89 | 15 | 19 | 10k+ | Missing direct file access protection | ||
| #26 | Health Endpoint | 92 | 3 | 2 | 3k+ | Missing Arg Domain | ||
| #27 | Disable WP REST API | 93 | 7 | 30k+ | Missing nonce verification | |||
| #28 | Send Emails with Resend | 93 | 3 | 0 | 900 | Setting is missing a sanitization callback | ||
| #29 | Skyword Publishing API | 93 | 49 | 15 | 400 | wp function not compatible with requires wp | ||
| #30 | Make Connector | 94 | 1 | 9 | 80k+ | Non-prefixed constant | ||
| #31 | WP Sync for Notion – Notion to WordPress | 94 | 14 | 47 | 1k+ | Non-prefixed hook name | ||
| #32 | ACF to WP-API | 96 | 11 | 5 | 400 | wp function not compatible with requires wp | ||
| #33 | WP REST API – Pure Taxonomies | 96 | 5 | 3 | 400 | trademarked term | ||
| #34 | WP-REST-API V2 Menus | 96 | 5 | 4 | 3k+ | trademarked term | ||
| #35 | WP REST Yoast Meta | 97 | 2 | 8 | 1k+ | trademarked term | ||
| #36 | Add-On for Contact Form 7 to Notion | 98 | 2 | 7 | 400 | Non-prefixed hook name | ||
| #37 | SheetDB – get your Google Spreadsheet data | 98 | 1 | 5 | 700 | Missing Version | ||
| #38 | Get Use APIs – JSON Content Importer | 99 | 1 | 1 | 5k+ | upgrade notice limit | ||
| #39 | Maps from Yandex for Elementor | 99 | 1 | 2 | 7k+ | missing composer json file |
