Editor WordPress Plugins That Need Review
119 indexed plugins
Plugins
119
Active Installs
27m+
Average Score
68
Audited
119
Needs Review
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Brizy – Page Builder | 20 | 589 | 720 | 70k+ | Output is not escaped | ||
| #2 | Theme Editor | 22 | 798 | 685 | 50k+ | Output is not escaped | ||
| #3 | Interactive Content – H5P | 23 | 565 | 380 | 40k+ | Non Singular String Literal Domain | ||
| #4 | Kadence Blocks — Page Builder Toolkit for Gutenberg Editor | 23 | 55 | 2,127 | 600k+ | Non-prefixed global variable | ||
| #5 | bBlocks – Essential Gutenberg Blocks & Patterns Collection | 24 | 656 | 1,511 | 700 | Non-prefixed global variable | ||
| #6 | Page Builder: Pagelayer – Drag and Drop website builder | 24 | 769 | 556 | 400k+ | Output is not escaped | ||
| #7 | TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder | 25 | 705 | 1,587 | 10k+ | Non-prefixed global variable | ||
| #8 | Spectra Gutenberg Blocks – Website Builder for the Block Editor | 25 | 253 | 3,227 | 1m+ | Non-prefixed global variable | ||
| #9 | StylePress for Elementor | 27 | 767 | 283 | 600 | Text Domain Mismatch | ||
| #10 | Getwid – Gutenberg Blocks | 29 | 139 | 173 | 50k+ | Non-prefixed global variable | ||
| #11 | WP Magazine Modules Lite | 29 | 152 | 674 | 5k+ | Non-prefixed global variable | ||
| #12 | FormLift for Keap (Legacy) Web Forms | 30 | 162 | 315 | 400 | Request data is not unslashed | ||
| #13 | Kindeditor For WordPress | 31 | 63 | 130 | 500 | Non-prefixed global variable | ||
| #14 | Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | 32 | 348 | 258 | 50k+ | Output is not escaped | ||
| #15 | UiCore Blocks – Free WordPress Gutenberg Blocks | 32 | 59 | 387 | 500 | Non-prefixed global variable | ||
| #16 | WP Edit | 33 | 337 | 137 | 40k+ | Unsafe printing function | ||
| #17 | Useful Blocks | 34 | 214 | 22 | 20k+ | Output is not escaped | ||
| #18 | BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library | 35 | 56 | 16 | 10k+ | block api version too low | ||
| #19 | Gutenberg Blocks Library & Toolkit – Editor Plus | 35 | 27 | 11 | 6k+ | Text Domain Mismatch | ||
| #20 | Elementor Website Builder – more than just a page builder | 35 | 46 | 428 | 10m+ | Non-prefixed global variable | ||
| #21 | Elfsight Blocks for Elementor — 80+ Widgets | 35 | 444 | 3 | 2k+ | Text Domain Mismatch | ||
| #22 | Highlighting Code Block | 35 | 30 | 3 | 10k+ | Output is not escaped | ||
| #23 | Themify Icons | 35 | 33 | 12 | 3k+ | Output is not escaped | ||
| #24 | Which Elementor Addon | 35 | 26 | 3 | 500 | Text Domain Mismatch | ||
| #25 | Black Widgets For Elementor | 36 | 2,608 | 19 | 800 | Text Domain Mismatch | ||
| #26 | Just TinyMCE Custom Styles | 36 | 112 | 28 | 1k+ | Missing Arg Domain | ||
| #27 | Qubely – Advanced Gutenberg Blocks | 36 | 39 | 78 | 8k+ | Request data is not unslashed | ||
| #28 | WP Super Edit | 36 | 35 | 185 | 2k+ | Nonce verification recommended | ||
| #29 | WP Emmet | 37 | 154 | 8 | 3k+ | Output is not escaped | ||
| #30 | Customize Posts | 38 | 31 | 77 | 1k+ | Non-prefixed hook name | ||
| #31 | Front-end Editor | 38 | 78 | 62 | 500 | Output is not escaped | ||
| #32 | Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid | 39 | 65 | 72 | 6k+ | block api version too low | ||
| #33 | TinyMCE Custom Styles | 39 | 297 | 76 | 7k+ | Non Singular String Literal Domain | ||
| #34 | Better Internal Link Search | 40 | 23 | 48 | 1k+ | strip tags strip tags | ||
| #35 | Black Studio TinyMCE Widget | 40 | 39 | 28 | 200k+ | Output is not escaped | ||
| #36 | AddQuicktag | 41 | 86 | 10 | 100k+ | Output is not escaped | ||
| #37 | Central Color Palette | 41 | 73 | 33 | 10k+ | Output is not escaped | ||
| #38 | Advanced Editor Tools | 41 | 143 | 84 | 1m+ | Unsafe printing function | ||
| #39 | Flexible Editor Panel for Elementor | 42 | 154 | 42 | 20k+ | Text Domain Mismatch | ||
| #40 | Advanced TinyMCE Configuration | 43 | 99 | 8 | 10k+ | Text Domain Mismatch | ||
| #41 | Disable Gutenberg | 43 | 23 | 47 | 500k+ | Nonce verification recommended | ||
| #42 | User Role Editor | 43 | 117 | 145 | 700k+ | Output is not escaped | ||
| #43 | wp-Monalisa | 48 | 56 | 94 | 700 | Direct Query | ||
| #44 | Preserved HTML Editor Markup | 53 | 12 | 22 | 600 | Output is not escaped | ||
| #45 | Preserved HTML Editor Markup Plus | 53 | 12 | 22 | 3k+ | Output is not escaped | ||
| #46 | aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder | 54 | 8 | 382 | 2k+ | Non-prefixed global variable | ||
| #47 | Gutenify – Visual Site Builder Blocks & Site Templates | 55 | 66 | 40 | 5k+ | Missing Arg Domain | ||
| #48 | Posts Columns Manager | 56 | 47 | 2 | 800 | Output is not escaped | ||
| #49 | Admin Page Notes | 58 | 17 | 15 | 700 | Text Domain Mismatch | ||
| #50 | Disable Visual Editor WYSIWYG | 62 | 10 | 12 | 1k+ | Nonce verification recommended |
