Most Installed Javascript WordPress Plugins
39 indexed plugins
Plugins
39
Active Installs
420k+
Average Score
63
Audited
38
Most Installed
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Shortcoder — Create Shortcodes for Anything | 37 | 25 | 70 | 100k+ | Non-prefixed global variable | ||
| #2 | Async JavaScript | 37 | 357 | 79 | 70k+ | Unsafe printing function | ||
| #3 | Speculative Loading | 99 | 7 | 70k+ | Non-prefixed global variable | |||
| #4 | Scripts n Styles | 39 | 150 | 92 | 30k+ | Output is not escaped | ||
| #5 | jQuery Updater | 97 | 8 | 4 | 20k+ | library core files | ||
| #6 | SOGO Add Script to Individual Pages Header Footer | 39 | 74 | 40 | 20k+ | Output is not escaped | ||
| #7 | CSS & JavaScript Toolbox | 25 | 155 | 617 | 10k+ | Non-prefixed class | ||
| #8 | Custom CSS and JavaScript | 35 | 38 | 91 | 10k+ | Input is not sanitized | ||
| #9 | Raw HTML | 66 | 17 | 35 | 10k+ | Non-prefixed function | ||
| #10 | Code Embed | 100 | 0 | 10k+ | No open findings | |||
| #11 | Use Google Libraries | 35 | 13 | 5 | 10k+ | Hidden files included | ||
| #12 | Web Worker Offloading | 99 | 2 | 10k+ | Non-prefixed constant | |||
| #13 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 9k+ | Non-prefixed constant | ||
| #14 | Scripts To Footer | 35 | 13 | 2 | 7k+ | Text Domain Mismatch | ||
| #15 | FancyBox | 96 | 5 | 3 | 4k+ | Not In Footer | ||
| #16 | Add Code To Head | 92 | 2 | 8 | 3k+ | Non-prefixed global variable | ||
| #17 | JS Archive List | 34 | 99 | 31 | 3k+ | Output is not escaped | ||
| #18 | ReactPress – Create React App for WordPress | 35 | 26 | 43 | 3k+ | Request data is not unslashed | ||
| #19 | WPGatsby | 31 | 125 | 55 | 3k+ | Text Domain Mismatch | ||
| #20 | WebberZone Snippetz – Header, Body and Footer manager | 96 | 1 | 53 | 2k+ | Dynamic hook name | ||
| #21 | Shadowbox JS | 36 | 246 | 14 | 2k+ | Unsafe printing function | ||
| #22 | JS Categories List Widget | 35 | 37 | 18 | 1k+ | Non Singular String Literal Domain | ||
| #23 | Shutter Reloaded | 38 | 194 | 95 | 1k+ | Text Domain Mismatch | ||
| #24 | Slideshow | 97 | 4 | 2 | 1k+ | Post Not In exclude | ||
| #25 | Speed Up – JavaScript To Footer | 89 | 4 | 1 | 1k+ | Output is not escaped | ||
| #26 | Custom CSS and JS | 83 | 11 | 1 | 900 | Output is not escaped | ||
| #27 | Autover | 98 | 4 | 0 | 800 | Missing direct file access protection | ||
| #28 | jQuery Image Lazy Load WP | 95 | 7 | 4 | 800 | Not Allowed | ||
| #29 | Modernizr for WordPress | Pending | - | - | 800 | Pending scan | ||
| #30 | Custom CSS/JS | 40 | 58 | 34 | 800 | Text Domain Mismatch | ||
| #31 | WP Deferred JavaScripts | 85 | 10 | 7 | 800 | Output is not escaped | ||
| #32 | WP Minify Fix | 20 | 306 | 380 | 800 | Output is not escaped | ||
| #33 | Async JS and CSS | 37 | 90 | 1 | 700 | Text Domain Mismatch | ||
| #34 | Google Webfont Optimizer | 36 | 45 | 49 | 700 | Output is not escaped | ||
| #35 | Speed Up – Browser Caching | 95 | 13 | 2 | 700 | file system operations is writable | ||
| #36 | JavaScript to Footer | 97 | 5 | 0 | 600 | Missing direct file access protection | ||
| #37 | Slimbox | 97 | 4 | 1 | 600 | Missing direct file access protection | ||
| #38 | Slimbox Plugin | 89 | 9 | 2 | 600 | Non Enqueued Script | ||
| #39 | Smartslider | 83 | 13 | 0 | 600 | Output is not escaped |
