Javascript WordPress Plugins That Need Review
46 indexed plugins
Plugins
46
Active Installs
420k+
Average Score
63
Audited
46
Needs Review
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | WP Minify Fix | 20 | 306 | 380 | 800 | Output is not escaped | ||
| #2 | WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript | 22 | 164 | 257 | 8k+ | Non-prefixed constant | ||
| #3 | CSS & JavaScript Toolbox | 25 | 155 | 617 | 10k+ | Non-prefixed class | ||
| #4 | WPGatsby | 31 | 125 | 55 | 3k+ | Text Domain Mismatch | ||
| #5 | JS Archive List | 34 | 99 | 31 | 3k+ | Output is not escaped | ||
| #6 | Custom CSS and JavaScript | 35 | 38 | 91 | 10k+ | Input is not sanitized | ||
| #7 | Custom JavaScript Editor | 35 | 8 | 23 | 400 | Missing Version | ||
| #8 | JS Categories List Widget | 35 | 37 | 18 | 1k+ | Non Singular String Literal Domain | ||
| #9 | ReactPress – Create React App for WordPress | 35 | 26 | 43 | 3k+ | Request data is not unslashed | ||
| #10 | Scripts To Footer | 35 | 13 | 2 | 7k+ | Text Domain Mismatch | ||
| #11 | Tapfiliate | 35 | 35 | 49 | 400 | Nonce verification recommended | ||
| #12 | Use Google Libraries | 35 | 13 | 5 | 10k+ | Hidden files included | ||
| #13 | Google Webfont Optimizer | 36 | 45 | 49 | 700 | Output is not escaped | ||
| #14 | Shadowbox JS | 36 | 246 | 14 | 1k+ | Unsafe printing function | ||
| #15 | Async JavaScript | 37 | 357 | 79 | 70k+ | Unsafe printing function | ||
| #16 | Async JS and CSS | 37 | 90 | 1 | 700 | Text Domain Mismatch | ||
| #17 | Shortcoder — Create Shortcodes for Anything | 38 | 25 | 70 | 100k+ | Non-prefixed global variable | ||
| #18 | Shutter Reloaded | 38 | 194 | 95 | 1k+ | Text Domain Mismatch | ||
| #19 | SOGO Add Script to Individual Pages Header Footer | 39 | 74 | 40 | 20k+ | Output is not escaped | ||
| #20 | Scripts n Styles | 39 | 150 | 92 | 30k+ | Output is not escaped | ||
| #21 | Custom CSS/JS | 40 | 58 | 34 | 700 | Text Domain Mismatch | ||
| #22 | Insert JavaScript and CSS | 41 | 64 | 19 | 400 | Text Domain Mismatch | ||
| #23 | Smart JavaScript Auto Loader | 44 | 83 | 2 | 400 | Output is not escaped | ||
| #24 | Raw HTML | 66 | 17 | 35 | 10k+ | Non-prefixed function | ||
| #25 | Live Custom CSS JS Code Editor | 74 | 18 | 4 | 400 | Output is not escaped | ||
| #26 | Custom CSS and JS | 83 | 11 | 1 | 900 | Output is not escaped | ||
| #27 | Smartslider | 83 | 13 | 0 | 600 | Output is not escaped | ||
| #28 | Referrer Input for Contact Form 7 | 85 | 39 | 2 | 500 | wp function not compatible with requires wp | ||
| #29 | WP Deferred JavaScripts | 85 | 10 | 7 | 800 | Output is not escaped | ||
| #30 | Slimbox Plugin | 89 | 9 | 2 | 500 | Non Enqueued Script | ||
| #31 | Add Code To Head | 92 | 2 | 8 | 3k+ | Non-prefixed global variable | ||
| #32 | Disable CSS JS Cache | 93 | 9 | 400 | Non-prefixed function | |||
| #33 | jQuery Image Lazy Load WP | 95 | 7 | 4 | 800 | Not Allowed | ||
| #34 | WebberZone Snippetz – Header, Body and Footer manager | 96 | 1 | 53 | 2k+ | Dynamic hook name | ||
| #35 | FancyBox | 96 | 5 | 3 | 4k+ | Not In Footer | ||
| #36 | Modernizr for WordPress | 96 | 5 | 4 | 800 | Deprecated parameter: load_plugin_textdomain parameter 2 | ||
| #37 | NextGenThemes jsDelivr CDN | 96 | 27 | 0 | 400 | wp function not compatible with requires wp | ||
| #38 | JavaScript to Footer | 97 | 5 | 0 | 500 | Missing direct file access protection | ||
| #39 | jQuery Updater | 97 | 8 | 4 | 20k+ | library core files | ||
| #40 | Slideshow | 97 | 4 | 2 | 1k+ | Post Not In exclude | ||
| #41 | Slimbox | 97 | 4 | 1 | 600 | Missing direct file access protection | ||
| #42 | Autover | 98 | 4 | 0 | 800 | Missing direct file access protection | ||
| #43 | Hide Text Shortcode | 98 | 4 | 0 | 400 | Missing direct file access protection | ||
| #44 | Speculative Loading | 99 | 7 | 70k+ | Non-prefixed global variable | |||
| #45 | Web Worker Offloading | 99 | 2 | 10k+ | Non-prefixed constant | |||
| #46 | Code Embed | 100 | 0 | 10k+ | No open findings |
