Import WordPress Plugins with Most Issues
87 indexed plugins
Plugins
87
Active Installs
2m+
Average Score
55
Audited
87
Most Issues
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | Add From Server | 37 | 52 | 20 | 60k+ | Output is not escaped | ||
| #52 | Select Post Export | 40 | 51 | 18 | 500 | Output is not escaped | ||
| #53 | Simple Membership WP user Import | 39 | 22 | 46 | 4k+ | Request data is not unslashed | ||
| #54 | WP Options Importer | 96 | 56 | 4 | 6k+ | Text Domain Mismatch | ||
| #55 | Event Organiser CSV | 50 | 28 | 27 | 600 | Output is not escaped | ||
| #56 | Flawless Themes Demo Importer | 94 | 39 | 11 | 1k+ | Text Domain Mismatch | ||
| #57 | Archivarix External Images Importer | 89 | 8 | 35 | 1k+ | Non-prefixed global variable | ||
| #58 | Bulk Media Register | 95 | 8 | 35 | 8k+ | Non-prefixed hook name | ||
| #59 | Bulk Post Importer | 84 | 1 | 38 | 900 | Missing nonce verification | ||
| #60 | Bulk Term Generator – Import multiple tags, categories, and taxonomies easily | 66 | 8 | 31 | 2k+ | Request data is not unslashed | ||
| #61 | AC Advanced Flamingo Settings | 66 | 6 | 32 | 700 | Nonce verification recommended | ||
| #62 | CSV Importer | 54 | 24 | 11 | 3k+ | Missing direct file access protection | ||
| #63 | Elegant Blog Themes Demo Importer | 96 | 22 | 13 | 500 | Text Domain Mismatch | ||
| #64 | Starter Templates by Gradient Themes | 83 | 27 | 7 | 3k+ | Text Domain Mismatch | ||
| #65 | Import Markdown – Versatile Markdown Importer | 88 | 25 | 9 | 2k+ | Missing Arg Domain | ||
| #66 | ThemeinWP Import Companion | 56 | 17 | 14 | 4k+ | Unsafe printing function | ||
| #67 | WP All Import – Import SEO Settings for All In One SEO | 65 | 19 | 11 | 900 | Output is not escaped | ||
| #68 | BuddyPress Default Data | 71 | 8 | 21 | 400 | Interpolated SQL is not prepared | ||
| #69 | Customizer Export/Import | 47 | 14 | 15 | 100k+ | Unsafe printing function | ||
| #70 | Spiraclethemes Site Library | 97 | 28 | 1k+ | Non-prefixed global variable | |||
| #71 | eMagicOne Store Manager for WooCommerce | 91 | 6 | 19 | 500 | Non-prefixed class | ||
| #72 | Ceylon Demo Installer | 81 | 11 | 9 | 400 | Non-prefixed function | ||
| #73 | Import / Export Customizer Settings | 79 | 5 | 13 | 50k+ | Input is not sanitized | ||
| #74 | Customizer Backup & Reset | 35 | 8 | 10 | 7k+ | Output is not escaped | ||
| #75 | Tumblr Importer | 91 | 7 | 9 | 10k+ | wp function not compatible with requires wp | ||
| #76 | Blocks Export Import – Backup & Move Gutenberg Blocks as JSON | 98 | 2 | 11 | 1k+ | Non-prefixed global variable | ||
| #77 | Import Shopify To WP | 93 | 7 | 5 | 800 | Missing Translators Comment | ||
| #78 | Hoot Import | 92 | 1 | 10 | 1k+ | Direct Query | ||
| #79 | Widget Importer & Exporter | 98 | 9 | 1 | 200k+ | wp function not compatible with requires wp | ||
| #80 | Custom Post Exporter | 99 | 7 | 1 | 3k+ | Text Domain Mismatch | ||
| #81 | Import Export Menu | 92 | 7 | 2k+ | Input is not sanitized | |||
| #82 | Menu Backup & Restore + Import/Export | 99 | 7 | 0 | 400 | wp function not compatible with requires wp | ||
| #83 | Catch Themes Demo Import | 96 | 1 | 5 | 5k+ | Non-prefixed hook name | ||
| #84 | Solace Extra | 99 | 5 | 10k+ | Non-prefixed class | |||
| #85 | TutorMate | 98 | 3 | 2 | 10k+ | Missing Translators Comment | ||
| #86 | Add From Server Reloaded | 99 | 2 | 1 | 3k+ | Missing direct file access protection | ||
| #87 | Crafthemes Demo Import | 99 | 2 | 1 | 400 | Not In Footer |
