Most Installed Ecommerce WordPress Plugins
149 indexed plugins
Plugins
149
Active Installs
10m+
Average Score
52
Audited
149
Most Installed
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #101 | Tilopay | 37 | 35 | 130 | 1k+ | Nonce verification recommended | ||
| #102 | TriPay Payment Gateway | 45 | 478 | 44 | 1k+ | Text Domain Mismatch | ||
| #103 | Sovrn | 43 | 9 | 29 | 1k+ | Input is not sanitized | ||
| #104 | Payment Gateway – nexi Alpha Bank for WooCommerce | 39 | 96 | 40 | 1k+ | Non Singular String Literal Domain | ||
| #105 | WP Courseware for WooCommerce | 35 | 55 | 49 | 1k+ | Text Domain Mismatch | ||
| #106 | Skroutz & Bestprice XML feed for WooCommerce | 39 | 135 | 3 | 1k+ | Output is not escaped | ||
| #107 | Data Exchange for WooCommerce and 1C:Enterprise/1С:Предприятие | 35 | 1 | 2 | 1k+ | Hidden files included | ||
| #108 | WP Express Checkout (Fast Payments via PayPal & Stripe) | 22 | 591 | 627 | 1k+ | Output is not escaped | ||
| #109 | WP Stripe Checkout | 36 | 198 | 118 | 1k+ | Unsafe printing function | ||
| #110 | WPoperation Elementor Addons | 33 | 891 | 52 | 1k+ | Text Domain Mismatch | ||
| #111 | 2C2P Redirect API for WooCommerce | 36 | 136 | 62 | 900 | wp function not compatible with requires wp | ||
| #112 | Weight/Country Shipping for WooCommerce | 79 | 10 | 2 | 900 | Unsafe printing function | ||
| #113 | Wishlist for WooCommerce | 99 | 2 | 1 | 900 | wp function not compatible with requires wp | ||
| #114 | Express Checkout via PayPal for WooCommerce | 31 | 158 | 200 | 800 | Nonce verification recommended | ||
| #115 | Social Shop for WooCommerce | 38 | 51 | 24 | 800 | Output is not escaped | ||
| #116 | Storefront Add Slider | 92 | 11 | 1 | 800 | Text Domain Mismatch | ||
| #117 | WC Booster | 27 | 191 | 282 | 800 | Non-prefixed global variable | ||
| #118 | Sold Individually for WooCommerce Product Variations | 86 | 2 | 6 | 800 | Missing nonce verification | ||
| #119 | WooCommerce New Product Badge | 91 | 8 | 8 | 800 | Text Domain Mismatch | ||
| #120 | Continue Shopping Anywhere for WooCommerce | 90 | 21 | 10 | 700 | Text Domain Mismatch | ||
| #121 | Magni Image Flip For WooCommerce | 86 | 24 | 8 | 700 | Text Domain Mismatch | ||
| #122 | Pago por Redsys | 50 | 44 | 59 | 700 | Text Domain Mismatch | ||
| #123 | payever – WooCommerce Gateway | 39 | 263 | 131 | 700 | Text Domain Mismatch | ||
| #124 | PlatiOnline Payments | 29 | 304 | 110 | 700 | Output is not escaped | ||
| #125 | ShopWP | 22 | 430 | 225 | 700 | Text Domain Mismatch | ||
| #126 | Aplazame | 38 | 34 | 39 | 600 | Non-prefixed global variable | ||
| #127 | Beeketing for WooCommerce – Marketing Automation to Boost Sales | 34 | 113 | 123 | 600 | SQL query is not prepared | ||
| #128 | ColorMeShop WordPress Plugin | 36 | 392 | 37 | 600 | Exception output is not escaped | ||
| #129 | Dintero Checkout for WooCommerce Payment Methods | 35 | 58 | 48 | 600 | Text Domain Mismatch | ||
| #130 | EDD Hide Download | 65 | 13 | 13 | 600 | Output is not escaped | ||
| #131 | Newebpay Payment | 33 | 146 | 115 | 600 | Text Domain Mismatch | ||
| #132 | Portugal CTT Tracking for WooCommerce | 98 | 1 | 5 | 600 | Non-prefixed function | ||
| #133 | Razorpay for Gravity Forms | 21 | 411 | 47 | 600 | Exception output is not escaped | ||
| #134 | Razorpay Subscriptions for WooCommerce | 44 | 28 | 35 | 600 | Exception output is not escaped | ||
| #135 | Search Attributes for WooCommerce | 35 | 26 | 3 | 600 | Text Domain Mismatch | ||
| #136 | Shop as Client for WooCommerce – Manual, Phone & Email Orders | 98 | 1 | 5 | 600 | Non-prefixed function | ||
| #137 | StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More | 35 | 524 | 600 | Non-prefixed global variable | |||
| #138 | Documents for WooCommerce | 61 | 16 | 13 | 500 | Output is not escaped | ||
| #139 | Gravity Forms Eway | 33 | 519 | 45 | 500 | Missing Translators Comment | ||
| #140 | Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses | 99 | 1 | 5 | 500 | Non-prefixed constant | ||
| #141 | MONEI Payments for WooCommerce | 35 | 15 | 65 | 500 | Non-prefixed hook name | ||
| #142 | Thank you page viewer for Woocommerce | 86 | 6 | 3 | 500 | Output is not escaped | ||
| #143 | Global Payments SecureSubmit Gateway | 29 | 199 | 443 | 500 | Non-prefixed class | ||
| #144 | Worldline Global Online Pay for WooCommerce | 31 | 160 | 86 | 500 | Missing direct file access protection | ||
| #145 | dLocal Go Payments | 83 | 9 | 15 | 400 | Missing Translators Comment | ||
| #146 | FlagShip WooCommerce Shipping | 26 | 495 | 188 | 400 | Non Singular String Literal Domain | ||
| #147 | Live Sales Notification (Recent Sales Popups) | 33 | 114 | 120 | 400 | SQL query is not prepared | ||
| #148 | Stancer for WooCommerce | 64 | 2 | 108 | 400 | Non-prefixed global variable | ||
| #149 | Verge3D Publishing and E-Commerce | 27 | 245 | 298 | 400 | Nonce verification recommended |
