Most Downloaded Code WordPress Plugins

36 indexed plugins

Plugins

36

Active Installs

4m+

Average Score

63

Audited

36

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager8827333m+wp function not compatible with requires wp
#2Code Snippets36342031m+Nonce verification recommended
#3Simple Custom CSS Plugin88175100k+wp function not compatible with requires wp
#4Head & Footer Code82115100k+Non-prefixed constant
#5Shortcoder — Create Shortcodes for Anything372570100k+Non-prefixed global variable
#6SyntaxHighlighter Evolved45334620k+Not In Footer
#7Code Embed100010k+No open findings
#8CSS & JavaScript Toolbox2515561710k+Non-prefixed class
#9Scripts n Styles391509230k+Output is not escaped
#10WP Coder – Insert & Manage Code Snippets365328010k+Nonce verification recommended
#11Highlighting Code Block356210k+Hidden files included
#12Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way.100110k+mismatched plugin name
#13Code Block Pro – Beautiful Syntax Highlighting357410k+badly named files
#14CodeColorer64652661k+Non-prefixed global variable
#15Prismatic4261292k+Output is not escaped
#16Advanced CSS Editor762565k+Output is not escaped
#17WebberZone Snippetz – Header, Body and Footer manager961532k+Dynamic hook name
#18WP-Markdown353139400Output is not escaped
#19Code Block Syntax Highlighter for Elementor783443600Non Singular String Literal Domain
#20Urvanov Syntax Highlighter30221873k+Output is not escaped
#21Code Widget4460334k+Text Domain Mismatch
#22Foxtool All-in-One: Contact chat button, Custom login, Media optimize images271,6293607k+Unsafe printing function
#23Preserve Code Formatting9911400outdated tested upto header
#24Code Prettify35731k+wp function not compatible with requires wp
#25Add Code To Head92283k+Non-prefixed global variable
#26Syntax-highlighting Code Block (with Server-side Rendering)99111k+Missing direct file access protection
#27Nav Menu Manager88917800Request data is not unslashed
#28Validated9173600Missing direct file access protection
#29Pastacode337766400Non-prefixed global variable
#30📷 Simple QR Code Generator Widget502114400Output is not escaped
#31Code Engine – PHP Snippets, AI Functions & Automation for WordPress2812496700Non Singular String Literal Domain
#32Code Click to Copy83129700Non-prefixed function
#33CodePen Embed Block8283600Text Domain Mismatch
#34AMS Google Webmaster Tools76103400Output is not escaped
#35Code Snippet DM74212500Output is not escaped
#36Greenshift Smart Code AI86991k+Request data is not unslashed