Page WordPress Plugins That Need Review
82 indexed plugins
Plugins
82
Active Installs
931k+
Average Score
63
Audited
82
Needs Review
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Link Library | 20 | 1,942 | 1,397 | 10k+ | Unsafe printing function | ||
| #2 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | Text Domain Mismatch | ||
| #3 | Iptanus File Upload | 24 | 509 | 1,325 | 10k+ | Non-prefixed function | ||
| #4 | Terms descriptions | 28 | 222 | 423 | 1k+ | Non-prefixed function | ||
| #5 | WP Admin UI Customize | 30 | 629 | 390 | 30k+ | Non-prefixed global variable | ||
| #6 | Post Lists View Custom | 33 | 462 | 150 | 2k+ | Missing Arg Domain | ||
| #7 | Reveal IDs | 35 | 23 | 13 | 40k+ | Output is not escaped | ||
| #8 | Simple Export Import for ACF Data | 35 | 19 | 64 | 1k+ | Request data is not unslashed | ||
| #9 | WP-Paginate | 35 | 37 | 55 | 20k+ | Input is not validated | ||
| #10 | Excerpt Editor | 37 | 170 | 142 | 500 | Unsafe printing function | ||
| #11 | Attachments | 38 | 238 | 66 | 8k+ | Unsafe printing function | ||
| #12 | Page Links To | 38 | 31 | 40 | 100k+ | Unsafe printing function | ||
| #13 | WP-CommentNavi | 38 | 68 | 46 | 700 | Output is not escaped | ||
| #14 | Page List Widget | 39 | 150 | 6 | 400 | Output is not escaped | ||
| #15 | Tabify Edit Screen | 39 | 83 | 27 | 500 | Output is not escaped | ||
| #16 | Page As Subdomain Lite | 40 | 61 | 25 | 500 | Output is not escaped | ||
| #17 | Page Comments Off Please | 40 | 17 | 29 | 1k+ | Nonce verification recommended | ||
| #18 | Permalink Editor | 40 | 50 | 28 | 1k+ | Output is not escaped | ||
| #19 | Redirector | 40 | 48 | 32 | 7k+ | Output is not escaped | ||
| #20 | WP Theme Test | 40 | 21 | 39 | 7k+ | Input is not sanitized | ||
| #21 | Insert JavaScript and CSS | 41 | 64 | 19 | 400 | Text Domain Mismatch | ||
| #22 | Pages In Widgets | 41 | 131 | 6 | 3k+ | Output is not escaped | ||
| #23 | Simple Revision Control | 41 | 22 | 42 | 1k+ | Dynamic hook name | ||
| #24 | TW Pagination | 41 | 90 | 23 | 1k+ | Non Singular String Literal Domain | ||
| #25 | WP Lorem ipsum | 41 | 37 | 29 | 500 | Unsafe printing function | ||
| #26 | Change Background Color for Pages, Posts, Widgets | 42 | 35 | 7 | 500 | Text Domain Mismatch | ||
| #27 | Companion Revision Manager – Revision Control | 42 | 18 | 28 | 4k+ | Unsafe printing function | ||
| #28 | LH Page Links To | 42 | 25 | 38 | 400 | Output is not escaped | ||
| #29 | Posts Like Dislike | 42 | 157 | 39 | 5k+ | Non Singular String Literal Domain | ||
| #30 | Admin Menu Tree Page View | 43 | 17 | 69 | 10k+ | Nonce verification recommended | ||
| #31 | Disable Author Pages | 48 | 23 | 5 | 6k+ | Unsafe printing function | ||
| #32 | Simple Copy Post Button | 53 | 14 | 24 | 400 | Input is not sanitized | ||
| #33 | Enhanced Category Pages | 55 | 23 | 25 | 2k+ | Direct Query | ||
| #34 | Fast Page & Post Duplicator | 55 | 12 | 25 | 60k+ | Direct Query | ||
| #35 | Quick Bulk Post & Page Creator | 55 | 43 | 1 | 2k+ | Text Domain Mismatch | ||
| #36 | Replace Protected Password | 56 | 6 | 18 | 600 | Input is not sanitized | ||
| #37 | WP Wrapper | 57 | 13 | 29 | 600 | Input is not validated | ||
| #38 | Multiple Post Passwords | 61 | 13 | 15 | 2k+ | Output is not escaped | ||
| #39 | PRyC WP: Add custom content to post and page (top/bottom) | 61 | 63 | 7 | 1k+ | Text Domain Mismatch | ||
| #40 | Email Post Changes | 63 | 43 | 8 | 500 | Missing Arg Domain | ||
| #41 | Query Posts | 63 | 53 | 6 | 800 | Output is not escaped | ||
| #42 | Page in Widget | 64 | 26 | 0 | 1k+ | Output is not escaped | ||
| #43 | VK Link Target Controller | 65 | 13 | 10 | 30k+ | Output is not escaped | ||
| #44 | HiFi (Head Injection, Foot Injection) | 66 | 13 | 11 | 2k+ | Output is not escaped | ||
| #45 | Page Meta | 66 | 26 | 14 | 800 | Missing Arg Domain | ||
| #46 | WordPress.com Editing Toolkit | 67 | 52 | 90 | 1k+ | Missing direct file access protection | ||
| #47 | Embed Iframe | 69 | 25 | 6 | 2k+ | wp function not compatible with requires wp | ||
| #48 | Ambrosite Next/Previous Page Link Plus | 70 | 11 | 21 | 900 | Interpolated SQL is not prepared | ||
| #49 | Search and Replace | 70 | 7 | 9 | 10k+ | Input is not sanitized | ||
| #50 | Disable Title | 72 | 20 | 15 | 2k+ | Text Domain Mismatch |
