Top Page WordPress Plugins
82 indexed plugins
Plugins
82
Active Installs
920k+
Average Score
63
Audited
82
Top Scores
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Pages with category and tag | 100 | 0 | 50k+ | No open findings | |||
| #2 | Custom Post Exporter | 99 | 7 | 1 | 2k+ | Text Domain Mismatch | ||
| #3 | HTML Page Sitemap (Block and Shortcode) | 98 | 3 | 4 | 10k+ | wp function not compatible with requires wp | ||
| #4 | Autoremove Attachments | 98 | 2 | 5 | 3k+ | Non-prefixed function | ||
| #5 | Which Template | 98 | 4 | 1 | 1k+ | wp function not compatible with requires wp | ||
| #6 | List Child Pages Shortcode | 98 | 5 | 2 | 600 | wp function not compatible with requires wp | ||
| #7 | Swift Switcher — Bulk & Custom Post Type Converter | 98 | 1 | 5 | 600 | Direct Query | ||
| #8 | Second Street | 98 | 10 | 6 | 400 | Non Enqueued Script | ||
| #9 | Add Category to Pages | 97 | 3 | 2 | 20k+ | Missing direct file access protection | ||
| #10 | Front Page Category | 97 | 4 | 2 | 5k+ | Missing direct file access protection | ||
| #11 | Hide Content by User Role for WPBakery | 97 | 5 | 5 | 1k+ | Missing direct file access protection | ||
| #12 | Page Management Dropdown | 97 | 3 | 3 | 600 | Direct Query | ||
| #13 | Allow Numeric Slugs | 96 | 5 | 2 | 900 | Direct Query | ||
| #14 | Password Passthrough | 94 | 2 | 3 | 500 | Nonce verification recommended | ||
| #15 | Display Posts – Easy lists, grids, navigation, and more | 92 | 11 | 23 | 80k+ | Non-prefixed function | ||
| #16 | Smooth Page Scroll Up/Down Buttons | 91 | 1 | 5 | 2k+ | Non-prefixed function | ||
| #17 | Canvas | 90 | 2 | 115 | 10k+ | Non-prefixed global variable | ||
| #18 | Duplicate PP | 90 | 8 | 10k+ | Non-prefixed constant | |||
| #19 | Replace Broken Images | 90 | 5 | 0 | 1k+ | Output is not escaped | ||
| #20 | PageView | 86 | 17 | 2 | 1k+ | wp function not compatible with requires wp | ||
| #21 | Floating Publish Button | 84 | 5 | 4 | 1k+ | Unsafe printing function | ||
| #22 | Simple Page Ordering | 82 | 11 | 9 | 100k+ | Missing Arg Domain | ||
| #23 | Admin Collapse Subpages | 82 | 4 | 12 | 4k+ | Nonce verification recommended | ||
| #24 | Custom 404 Error Page | 82 | 12 | 3 | 1k+ | Text Domain Mismatch | ||
| #25 | Page Excerpt | 81 | 11 | 1 | 3k+ | Missing Arg Domain | ||
| #26 | Pagebar2 | 81 | 19 | 37 | 900 | Non-prefixed global variable | ||
| #27 | Smart Passworded Pages | 80 | 11 | 8 | 2k+ | wp function not compatible with requires wp | ||
| #28 | Remove noreferrer | 79 | 17 | 14 | 5k+ | Missing Arg Domain | ||
| #29 | Display Post Metadata | 79 | 12 | 4 | 400 | Output is not escaped | ||
| #30 | Posts List | 77 | 11 | 15 | 7k+ | Non-prefixed hook name | ||
| #31 | Post Type Switcher | 75 | 3 | 18 | 200k+ | Direct Query | ||
| #32 | Ultimate Under Construction | 75 | 22 | 2 | 1k+ | Non Enqueued Script | ||
| #33 | Disable Title | 72 | 20 | 15 | 2k+ | Text Domain Mismatch | ||
| #34 | Search and Replace | 70 | 7 | 9 | 10k+ | Input is not sanitized | ||
| #35 | Ambrosite Next/Previous Page Link Plus | 70 | 11 | 21 | 900 | Interpolated SQL is not prepared | ||
| #36 | Embed Iframe | 69 | 25 | 6 | 2k+ | wp function not compatible with requires wp | ||
| #37 | WordPress.com Editing Toolkit | 67 | 52 | 90 | 1k+ | Missing direct file access protection | ||
| #38 | HiFi (Head Injection, Foot Injection) | 66 | 13 | 11 | 2k+ | Output is not escaped | ||
| #39 | Page Meta | 66 | 26 | 14 | 700 | Missing Arg Domain | ||
| #40 | VK Link Target Controller | 65 | 13 | 10 | 30k+ | Output is not escaped | ||
| #41 | Page in Widget | 64 | 26 | 0 | 1k+ | Output is not escaped | ||
| #42 | Query Posts | 63 | 53 | 6 | 800 | Output is not escaped | ||
| #43 | Email Post Changes | 63 | 43 | 8 | 500 | Missing Arg Domain | ||
| #44 | Multiple Post Passwords | 61 | 13 | 15 | 2k+ | Output is not escaped | ||
| #45 | PRyC WP: Add custom content to post and page (top/bottom) | 61 | 63 | 7 | 1k+ | Text Domain Mismatch | ||
| #46 | WP Wrapper | 57 | 13 | 29 | 600 | Input is not validated | ||
| #47 | Replace Protected Password | 56 | 6 | 18 | 600 | Input is not sanitized | ||
| #48 | Fast Page & Post Duplicator | 55 | 12 | 25 | 60k+ | Direct Query | ||
| #49 | Enhanced Category Pages | 55 | 23 | 25 | 2k+ | Direct Query | ||
| #50 | Quick Bulk Post & Page Creator | 55 | 43 | 1 | 2k+ | Text Domain Mismatch |
