Block WordPress Plugins That Need Review
238 indexed plugins
Plugins
238
Active Installs
4m+
Average Score
78
Audited
238
Needs Review
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Events Manager – Calendar, Bookings, Tickets, and more! | 22 | 4,713 | 5,660 | 70k+ | Output is not escaped | ||
| #2 | Gutenberg Blocks – ACF Blocks Suite | 23 | 1,097 | 1,449 | 400 | Non-prefixed global variable | ||
| #3 | Anti Spam and list cleaner – AcyChecker | 24 | 462 | 88 | 400 | Output is not escaped | ||
| #4 | bBlocks – Essential Gutenberg Blocks & Patterns Collection | 24 | 656 | 1,511 | 700 | Non-prefixed global variable | ||
| #5 | Omnipress | 24 | 169 | 245 | 800 | Non-prefixed global variable | ||
| #6 | IP Location Block | 25 | 521 | 624 | 10k+ | Output is not escaped | ||
| #7 | Plover Kit – Blocks, Patterns, Responsive Layout and Gutenberg Editor Enhancements | 25 | 685 | 1,382 | 3k+ | Non-prefixed global variable | ||
| #8 | Spice Blocks | 25 | 536 | 1,300 | 1k+ | Non-prefixed global variable | ||
| #9 | Spectra Gutenberg Blocks – Website Builder for the Block Editor | 25 | 253 | 3,227 | 1m+ | Non-prefixed global variable | ||
| #10 | Vayu Blocks – Website Builder for the Gutenberg Block Editor | 25 | 174 | 233 | 1k+ | Text Domain Mismatch | ||
| #11 | iQ Block Country | 27 | 164 | 245 | 20k+ | Request data is not unslashed | ||
| #12 | Meow Gallery | 29 | 113 | 182 | 10k+ | Direct Query | ||
| #13 | YASR – Yet Another Star Rating Plugin for WordPress | 30 | 252 | 378 | 10k+ | Output is not escaped | ||
| #14 | WPDoctor Malware Scanner & Vulnerability Checker & IP blocker with Hack monitor Lite | 31 | 133 | 438 | 600 | Non-prefixed global variable | ||
| #15 | Author Avatars List/Block | 32 | 85 | 135 | 4k+ | Non-prefixed hook name | ||
| #16 | Contact Form Block | 32 | 64 | 77 | 500 | Non Singular String Literal Domain | ||
| #17 | MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites | 33 | 2 | 503 | 700 | Non-prefixed function | ||
| #18 | Pastacode | 33 | 77 | 66 | 400 | Non-prefixed global variable | ||
| #19 | Spiffy Calendar | 33 | 473 | 243 | 3k+ | Output is not escaped | ||
| #20 | JS Archive List | 34 | 99 | 31 | 3k+ | Output is not escaped | ||
| #21 | Useful Blocks | 34 | 214 | 22 | 20k+ | Output is not escaped | ||
| #22 | Algori 360 Image | 35 | 6 | 6 | 4k+ | Hidden files included | ||
| #23 | Algori 360 Video | 35 | 6 | 6 | 500 | Hidden files included | ||
| #24 | Animate In View | 35 | 12 | 0 | 1k+ | Hidden files included | ||
| #25 | CTC Masonry Gallery 🎨 | 35 | 6 | 3 | 1k+ | Hidden files included | ||
| #26 | Gutenberg Block for WooCommerce Product Table | 35 | 14 | 4 | 3k+ | Hidden files included | ||
| #27 | Blocks for Eventbrite | 35 | 3 | 4 | 1k+ | Hidden files included | ||
| #28 | Code Block Pro – Beautiful Syntax Highlighting | 35 | 7 | 4 | 10k+ | badly named files | ||
| #29 | Gutenberg Blocks Library & Toolkit – Editor Plus | 35 | 27 | 11 | 6k+ | Text Domain Mismatch | ||
| #30 | Embed PDF Viewer | 35 | 1 | 2 | 20k+ | Hidden files included | ||
| #31 | Enable Responsive Image | 35 | 1 | 1 | 1k+ | Hidden files included | ||
| #32 | JS Categories List Widget | 35 | 37 | 18 | 1k+ | Non Singular String Literal Domain | ||
| #33 | MathML Block | 35 | 10 | 2 | 1k+ | Hidden files included | ||
| #34 | Modal Guten Block | 35 | 6 | 3 | 2k+ | Hidden files included | ||
| #35 | Out of the Block: OpenStreetMap | 35 | 9 | 4 | 700 | Missing direct file access protection | ||
| #36 | Pochipp | 35 | 27 | 102 | 20k+ | Non-prefixed global variable | ||
| #37 | Simple Popup Block | 35 | 14 | 1 | 500 | Missing direct file access protection | ||
| #38 | SimpleTOC – Table of Contents Block | 35 | 10 | 0 | 10k+ | Setting is missing a sanitization callback | ||
| #39 | Table Of Content Block – Auto-Generate Clickable Table of Contents | 35 | 2 | 1 | 3k+ | Hidden files included | ||
| #40 | Wavy Divider | 35 | 10 | 1 | 700 | Hidden files included | ||
| #41 | Countdown Block | 35 | 5 | 2 | 1k+ | Hidden files included | ||
| #42 | Breadcrumb NavXT | 36 | 102 | 111 | 800k+ | Non Singular String Literal Domain | ||
| #43 | Qubely – Advanced Gutenberg Blocks | 36 | 39 | 78 | 8k+ | Request data is not unslashed | ||
| #44 | Banhammer – Monitor Site Traffic, Block Bad Users and Bots | 37 | 104 | 174 | 1k+ | Output is not escaped | ||
| #45 | WP eBay Product Feeds | 37 | 136 | 31 | 700 | Output is not escaped | ||
| #46 | Category Posts Widget | 38 | 153 | 26 | 40k+ | Output is not escaped | ||
| #47 | My Social Feeds – Social Feeds Embedder Plugin for WP | 40 | 8 | 77 | 400 | Request data is not unslashed | ||
| #48 | Responsive Gallery Grid | 40 | 90 | 14 | 4k+ | Output is not escaped | ||
| #49 | Developer Tools Blocker | 40 | 35 | 47 | 400 | strip tags strip tags | ||
| #50 | Email Address Encoder | 41 | 109 | 8 | 100k+ | wp function not compatible with requires wp |
