PluginScore

Top Malware WordPress Plugins

18 indexed plugins

Plugins

18

Active Installs

10m+

Average Score

39

Audited

18

Top Scores

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner…10011k+mismatched plugin name
#2AntiVirus992130k+Missing direct file access protection
#3Sucuri Security – Auditing, Malware Scanner and Security Hardening825111600k+Missing direct file access protection
#4Security Ninja For MainWP4724671500Text Domain Mismatch
#5Atomic Edge Security – Firewall, Malware Scan and Login Security4012184600Non-prefixed global variable
#6DefendWP Firewall39162033k+Non-prefixed global variable
#7WPDoctor Malware Scanner & Vulnerability Checker & IP blocker with Hack monitor Lite31133438600Non-prefixed global variable
#8Jetpack Protect30657217100k+Text Domain Mismatch
#9Security Ninja – WordPress Security & Firewall291493477k+Direct Query
#10Jetpack VaultPress287136210k+Missing nonce verification
#11Defender Security – Malware Scanner, Login Security & Firewall2430651880k+Non-prefixed namespace
#12Security Plugin, Firewall & Malware Scanner with Auto Removal241,18877030k+Output is not escaped
#13Kadence Security – Password, Two Factor Authentication, and Brute Force Protection231,053967700k+Missing Translators Comment
#14SecuPress with Simple SSL – Simple and Performant Security231,6971,60140k+Non-prefixed global variable
#15Jetpack – WP Security, Backup, Speed, & Growth222,9751,3483m+Text Domain Mismatch
#16NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2662,059100k+Non-prefixed global variable
#17NinjaScanner – Virus & Malware scan2259655130k+Non-prefixed global variable
#18Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped