Password WordPress Plugins That Need Review
25 indexed plugins
Plugins
25
Active Installs
160k+
Average Score
60
Audited
25
Needs Review
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | OneLogin SAML SSO | 21 | 507 | 330 | 7k+ | wp function not compatible with requires wp | ||
| #2 | Passster – Password Protect Pages and Content | 22 | 539 | 1,419 | 10k+ | Non-prefixed global variable | ||
| #3 | Login Security Solution | 27 | 216 | 154 | 4k+ | Output is not escaped | ||
| #4 | Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress | 29 | 86 | 233 | 500 | Nonce verification recommended | ||
| #5 | Theme My Login | 32 | 251 | 549 | 60k+ | Non-prefixed function | ||
| #6 | Frontend Reset Password | 35 | 83 | 128 | 10k+ | Text Domain Mismatch | ||
| #7 | Post Password Token | 35 | 132 | 38 | 600 | Text Domain Mismatch | ||
| #8 | Protect the Children! | 35 | 2 | 34 | 1k+ | Missing nonce verification | ||
| #9 | SimpleModal Login | 39 | 50 | 12 | 800 | Unsafe printing function | ||
| #10 | yubikey-plugin | 40 | 64 | 33 | 400 | Text Domain Mismatch | ||
| #11 | Google Authenticator | 41 | 39 | 65 | 20k+ | Output is not escaped | ||
| #12 | Passwords Evolved | 45 | 26 | 17 | 1k+ | Output is not escaped | ||
| #13 | Replace Protected Password | 56 | 6 | 18 | 600 | Input is not sanitized | ||
| #14 | Multiple Post Passwords | 61 | 13 | 15 | 2k+ | Output is not escaped | ||
| #15 | Chap Secure Password Login | 72 | 13 | 7 | 600 | Input is not validated | ||
| #16 | Force Password Change | 73 | 4 | 10 | 400 | Missing nonce verification | ||
| #17 | Smart Passworded Pages | 80 | 11 | 8 | 2k+ | wp function not compatible with requires wp | ||
| #18 | PHP Native Password Hash | 90 | 7 | 6 | 2k+ | Non-prefixed global variable | ||
| #19 | hideShowPassword | 92 | 3 | 5 | 400 | trademarked term | ||
| #20 | Password Passthrough | 94 | 2 | 3 | 500 | Nonce verification recommended | ||
| #21 | ContentProtector – password protect your page, post or text | 95 | 1 | 3 | 2k+ | Non-prefixed class | ||
| #22 | Disable Password Reset | 97 | 5 | 0 | 1k+ | Forbidden PHP function found | ||
| #23 | Password bcrypt | 97 | 4 | 1 | 2k+ | Direct Query | ||
| #24 | PPWP – Password Protect Pages | 98 | 29 | 30k+ | Non-prefixed class | |||
| #25 | Password Strength for WooCommerce | 98 | 3 | 0 | 1k+ | Missing direct file access protection |
