PluginScore

Most Downloaded Login WordPress Plugins

131 indexed plugins

Plugins

131

Active Installs

6m+

Average Score

55

Audited

131

Most Downloaded

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Security Optimizer – The All-In-One Protection Plugin3540821m+Request data is not unslashed
#2WPS Hide Login4134722m+Nonce verification recommended
#3Loginizer258145041m+Output is not escaped
#4LoginPress | wp-login Custom Login Page Customizer55124301200k+Non-prefixed function
#5Theme My Login3225154960k+Non-prefixed function
#6WP-Members Membership Plugin2466938250k+Output is not escaped
#7WP Hide & Security Enhancer2712437550k+Input is not sanitized
#8Security Plugin, Firewall & Malware Scanner with Auto Removal241,19176930k+Output is not escaped
#9WP Ghost (Hide My WP Ghost) – Security & Firewall856373100k+Non-prefixed global variable
#10Limit Login Attempts408138300k+Output is not escaped
#11Custom Login Page Customizer236871,40890k+Non-prefixed global variable
#12Login Lockdown & Protection94515100k+Non-prefixed global variable
#13WP fail2ban – Advanced Security327515360k+Dynamic hook name
#14All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more.237501,35960k+Non-prefixed global variable
#15Login & Register Customizer – Popup | Slider | Inline | WooCommerce3326523040k+Output is not escaped
#16Login With Ajax – Fast Logins, 2FA, Redirects2362352010k+Output is not escaped
#17Sidebar Login972610k+Non-prefixed global variable
#18WPS Limit Login3915276100k+Output is not escaped
#19IP Geo Block233995899k+Output is not escaped
#20Google Authenticator41396520k+Output is not escaped
#21Login for Google Apps271398510k+Exception output is not escaped
#22My Private Site3142519020k+Text Domain Mismatch
#23Login as User361016430k+Output is not escaped
#24Erident Custom Login and Dashboard38122288k+Unsafe printing function
#25Username Changer84371340k+wp function not compatible with requires wp
#26Login Logo8310040k+Output is not escaped
#27Clean Login972136k+Non-prefixed hook name
#28Remove Dashboard Access35162330k+wp function not compatible with requires wp
#29Login Widget With Shortcode253351986k+wp function not compatible with requires wp
#30Custom Login Page Customizer – Login Designer225881,45530k+Non-prefixed global variable
#31WP Limit Login Attempts39266710k+Direct Query
#32XO Security945330k+wp function not compatible with requires wp
#33Easy Hide Login9831220k+Non-prefixed global variable
#34Login Security Captcha100010k+No open findings
#35ReCaptcha Integration for WordPress3760669k+Output is not escaped
#36Login Security Solution272161544k+Output is not escaped
#37OAuth Single Sign On – SSO (OAuth Client)90269366k+wp function not compatible with requires wp
#38WPS Bidouille2847221510k+Output is not escaped
#39Login or Logout Menu Item5513720k+Unsafe printing function
#40Simple Membership After Login Redirection6342410k+Missing nonce verification
#41Uber Login Logo6216510k+Unsafe printing function
#42OpenID Connect Generic Client7395910k+Non-prefixed hook name
#43One Time Login787840k+Nonce verification recommended
#44Authorizer653545k+Nonce verification recommended
#45Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms245635484k+Text Domain Mismatch
#46Duo Two-Factor Authentication3744613k+Missing nonce verification
#47SimpleModal Login395012800Unsafe printing function
#48Add Logo to Admin671437k+Unsafe printing function
#49AJAX Login and Registration modal popup + inline form281572613k+Output is not escaped
#50Frontend Reset Password358312810k+Text Domain Mismatch