PluginScore

Most Installed Firewall WordPress Plugins

30 indexed plugins

Plugins

30

Active Installs

10m+

Average Score

46

Audited

30

Most Installed

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#2All-In-One Security (AIOS) – Security and Firewall245521,2281m+Non-prefixed global variable
#3Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention256186051m+Unsafe printing function
#4Security Optimizer – The All-In-One Protection Plugin3540821m+Request data is not unslashed
#5Sucuri Security – Auditing, Malware Scanner and Security Hardening94525600k+Missing direct file access protection
#6MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall825522200k+Missing direct file access protection
#7BBQ Firewall – Fast & Powerful Firewall Security441717100k+Output is not escaped
#8Anti-Malware Security and Brute-Force Firewall23543965100k+Output is not escaped
#9WP Ghost (Hide My WP Ghost) – Security & Firewall856373100k+Non-prefixed global variable
#10Login Lockdown & Protection94515100k+Non-prefixed global variable
#11NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2662,059100k+Non-prefixed global variable
#12Defender Security – Malware Scanner, Login Security & Firewall2430651880k+Non-prefixed namespace
#13Patchstack – WordPress & Plugins Security2310748940k+Missing nonce verification
#14Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820240k+Missing Translators Comment
#15Security Plugin, Firewall & Malware Scanner with Auto Removal241,19176930k+Output is not escaped
#16BulletProof Security05,0484,94920k+Output is not escaped
#17Zero Spam for WordPress347939320k+Non-prefixed global variable
#18Forget Spam Comment6751010k+Input is not sanitized
#19IP Geo Block233995899k+Output is not escaped
#20Security Ninja – WordPress Security & Firewall291493477k+Direct Query
#21RSFirewall!245635214k+Output is not escaped
#22BotBlocker Security – Firewall & Bot Protection9953k+Non-prefixed constant
#23Advanced IP Blocker4094442k+Exception output is not escaped
#24Injection Guard3687451k+Unsafe printing function
#25Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner…10011k+mismatched plugin name
#26Snitch87519900Nonce verification recommended
#27WebTotem Security211,110213900Text Domain Mismatch
#28WEDOS | Protection & Cache Performance9823800ABSPATHDetected
#29Security Safe34193164700Missing Translators Comment
#30Atomic Edge Security – Firewall, Malware Scan and Login Security4012184600Non-prefixed global variable