Most Installed Google WordPress Plugins
100 indexed plugins
Plugins
100
Active Installs
8m+
Average Score
57
Audited
100
Most Installed
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Site Kit by Google – Analytics, Search Console, AdSense, Speed | 25 | 1,318 | 242 | 5m+ | Missing direct file access protection | ||
| #2 | Widgets for Google Reviews | 95 | 344 | 900k+ | Non-prefixed global variable | |||
| #3 | Google for WooCommerce | 37 | 352 | 138 | 800k+ | Exception output is not escaped | ||
| #4 | GA Google Analytics – Connect Google Analytics to WordPress | 42 | 46 | 30 | 400k+ | Output is not escaped | ||
| #5 | OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. | 31 | 213 | 63 | 300k+ | Output is not escaped | ||
| #6 | Nextend Social Login and Register | 28 | 1,612 | 221 | 200k+ | Output is not escaped | ||
| #7 | Local Google Fonts | 93 | 3 | 15 | 100k+ | Non-prefixed global variable | ||
| #8 | Login No Captcha reCAPTCHA | 42 | 45 | 24 | 60k+ | Unsafe printing function | ||
| #9 | Web Stories | 84 | 12 | 63 | 60k+ | Non-prefixed global variable | ||
| #10 | AI Powered Marketing | 89 | 8 | 8 | 50k+ | Offloaded Content | ||
| #11 | AI Provider for Google | 65 | 32 | 1 | 30k+ | Exception output is not escaped | ||
| #12 | Snazzy Maps | 43 | 9 | 62 | 30k+ | Request data is not unslashed | ||
| #13 | Social Media Widget | 53 | 90 | 21 | 30k+ | Text Domain Mismatch | ||
| #14 | Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin | 25 | 608 | 207 | 20k+ | Text Domain Mismatch | ||
| #15 | Metronet Tag Manager | 52 | 17 | 36 | 20k+ | Input is not validated | ||
| #16 | SEO Friendly Images | 39 | 292 | 20 | 20k+ | Output is not escaped | ||
| #17 | Login for Google Apps | 27 | 139 | 85 | 10k+ | Exception output is not escaped | ||
| #18 | Google Tag Manager | 98 | 7 | 4 | 10k+ | wp function not compatible with requires wp | ||
| #19 | CAOS | Host Google Analytics Locally | 38 | 124 | 44 | 10k+ | Output is not escaped | ||
| #20 | ICS Calendar | 99 | 2 | 1 | 10k+ | wp function not compatible with requires wp | ||
| #21 | miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) | 29 | 92 | 898 | 10k+ | Request data is not unslashed | ||
| #22 | SEO Ultimate | 24 | 437 | 269 | 10k+ | Output is not escaped | ||
| #23 | Use Google Libraries | 35 | 13 | 5 | 10k+ | Hidden files included | ||
| #24 | Analytics Germanized for Google Analytics (GDPR / DSGVO) | 40 | 49 | 14 | 7k+ | Output is not escaped | ||
| #25 | Flexible Map | 85 | 10 | 7 | 7k+ | Non-prefixed class | ||
| #26 | Map Block | 98 | 2 | 5 | 6k+ | Missing direct file access protection | ||
| #27 | Embedder for Google Reviews | 28 | 531 | 1,333 | 6k+ | Non-prefixed global variable | ||
| #28 | HT Easy GA4 – Google Analytics WordPress Plugin | 31 | 475 | 93 | 6k+ | Text Domain Mismatch | ||
| #29 | Embed Files from Google Drive | 77 | 4 | 35 | 5k+ | Nonce verification recommended | ||
| #30 | WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics | 29 | 118 | 128 | 5k+ | Output is not escaped | ||
| #31 | WP Google Search | 48 | 45 | 17 | 5k+ | Output is not escaped | ||
| #32 | Really Simple Google Tag Manager (GTM) | 35 | 115 | 15 | 4k+ | Text Domain Mismatch | ||
| #33 | ReCrawler | 49 | 10 | 40 | 4k+ | Direct Query | ||
| #34 | Simple Universal Google Analytics | 78 | 11 | 0 | 4k+ | Output is not escaped | ||
| #35 | ACF: Google Font Selector | 39 | 57 | 45 | 3k+ | Output is not escaped | ||
| #36 | Open Graph Protocol Framework | 75 | 17 | 12 | 3k+ | Missing direct file access protection | ||
| #37 | AdFlow – Easy Google AdSense Integration | 40 | 150 | 9 | 3k+ | Unsafe printing function | ||
| #38 | Ultimate Noindex Nofollow Tool II | 40 | 38 | 51 | 3k+ | Input is not validated | ||
| #39 | Very Simple Google Maps | 99 | 2 | 0 | 3k+ | Missing direct file access protection | ||
| #40 | VS Meta Description | 99 | 1 | 3 | 3k+ | Direct Query | ||
| #41 | WP Simple Adsense Insertion | 66 | 3 | 29 | 3k+ | Input is not validated | ||
| #42 | XML for Google Merchant Center | 29 | 52 | 312 | 3k+ | Non-prefixed global variable | ||
| #43 | Ad Widget for WordPress | 35 | 68 | 14 | 2k+ | Output is not escaped | ||
| #44 | 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 | 42 | 17 | 38 | 2k+ | Input is not sanitized | ||
| #45 | Business Reviews – build trust with real customer feedback | 90 | 4 | 4 | 2k+ | Non-prefixed class | ||
| #46 | FV Simpler SEO | 24 | 766 | 308 | 2k+ | Text Domain Mismatch | ||
| #47 | IndexMeNow | 99 | 1 | 0 | 2k+ | outdated tested upto header | ||
| #48 | Super Simple Google Analytics | 48 | 55 | 3 | 2k+ | Output is not escaped | ||
| #49 | Universal Google Adsense and Ads manager | 39 | 70 | 31 | 2k+ | Unsafe printing function | ||
| #50 | XML Sitemaps | 33 | 65 | 62 | 2k+ | Output is not escaped |
