Top Performance WordPress Plugins
163 indexed plugins
Plugins
163
Active Installs
21m+
Average Score
58
Audited
163
Top Scores
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | PromPress | 90 | 8 | 4 | 500 | Missing direct file access protection | ||
| #52 | Image Optimization – Compress Images and Convert to WebP or AVIF | 87 | 15 | 24 | 1m+ | Missing Translators Comment | ||
| #53 | lazysizes | 86 | 12 | 3 | 600 | wp function not compatible with requires wp | ||
| #54 | Static 404 | 85 | 1 | 7 | 3k+ | Input is not sanitized | ||
| #55 | WP Deferred JavaScripts | 85 | 10 | 7 | 800 | Output is not escaped | ||
| #56 | Cachify | 84 | 9 | 36 | 9k+ | Non-prefixed global variable | ||
| #57 | Lazy Load for Videos | 82 | 6 | 37 | 9k+ | Non-prefixed constant | ||
| #58 | ElasticPress | 81 | 13 | 655 | 8k+ | Non-prefixed hook name | ||
| #59 | atec Cache APCu | 81 | 41 | 21 | 3k+ | wp function not compatible with requires wp | ||
| #60 | Custom Fonts – Host Your Fonts Locally | 77 | 14 | 20 | 400k+ | Request data is not unslashed | ||
| #61 | Index WP Users For Speed | 77 | 10 | 35 | 1k+ | Non-prefixed global variable | ||
| #62 | Clear Cache Everywhere | 75 | 7 | 20 | 800 | Non-prefixed hook name | ||
| #63 | TinyPNG – JPEG, PNG & WebP image compression | 72 | 40 | 73 | 100k+ | Non-prefixed global variable | ||
| #64 | Cloudinary – Deliver Images and Videos at Scale | 72 | 691 | 134 | 5k+ | Text Domain Mismatch | ||
| #65 | Templ Optimizer | 72 | 6 | 63 | 1k+ | Direct Query | ||
| #66 | WPGraphQL Smart Cache | 71 | 87 | 9 | 6k+ | Text Domain Mismatch | ||
| #67 | commonWP | 71 | 18 | 33 | 400 | Non-prefixed hook name | ||
| #68 | Easy Auto Reload – Auto Refresh | 69 | 37 | 12 | 1k+ | Text Domain Mismatch | ||
| #69 | Auto Image Title & Alt | 68 | 13 | 4 | 400 | Missing direct file access protection | ||
| #70 | Easy PHP Settings | 66 | 34 | 48 | 1k+ | Missing Translators Comment | ||
| #71 | Disabler | 64 | 212 | 38 | 900 | Text Domain Mismatch | ||
| #72 | Falcon – WordPress Optimizations & Tweaks | 62 | 47 | 66 | 2k+ | Short PHP open tag found | ||
| #73 | Surge | 60 | 46 | 47 | 4k+ | Non-prefixed global variable | ||
| #74 | Lazy Loader | 59 | 6 | 24 | 9k+ | Nonce verification recommended | ||
| #75 | Debloat – Remove Unused CSS, Optimize JS | 58 | 24 | 20 | 30k+ | Nonce verification recommended | ||
| #76 | WP Healthcheck | 58 | 37 | 73 | 1k+ | Non-prefixed global variable | ||
| #77 | WebP Express Plus | 58 | 19 | 11 | 700 | Unsafe printing function | ||
| #78 | Cache-Control | 57 | 26 | 4 | 1k+ | Output is not escaped | ||
| #79 | The Cache Purger | 51 | 16 | 16 | 1k+ | Non Singular String Literal Text | ||
| #80 | SpinupWP | 49 | 43 | 38 | 30k+ | Non-prefixed function | ||
| #81 | Batcache | 49 | 12 | 53 | 700 | Input is not sanitized | ||
| #82 | Flying Pages: Preload Pages for Faster Navigation & Improved User Experience | 47 | 21 | 21 | 20k+ | Missing direct file access protection | ||
| #83 | Delete Duplicate Posts | 47 | 9 | 50 | 10k+ | Direct Query | ||
| #84 | Hyper Cache | 45 | 36 | 100 | 8k+ | Non-prefixed global variable | ||
| #85 | JetHost Total Care – Security & Enhancements | 45 | 10 | 85 | 900 | Direct Query | ||
| #86 | AMP | 43 | 63 | 362 | 400k+ | Non-prefixed hook name | ||
| #87 | Simple Like Page – Fast & Privacy-Friendly Page Embeds | 41 | 145 | 31 | 10k+ | Output is not escaped | ||
| #88 | WP Meteor Website Speed Optimization Addon | 40 | 34 | 19 | 20k+ | Output is not escaped | ||
| #89 | Plugin Load Filter | 40 | 76 | 112 | 7k+ | Text Domain Mismatch | ||
| #90 | FlyWP Helper – Page Cache, Page Optimization, Emails for FlyWP Server Control Panel | 40 | 20 | 81 | 5k+ | Non-prefixed global variable | ||
| #91 | WP Compress for MainWP | 40 | 20 | 36 | 700 | Output is not escaped | ||
| #92 | WP Performance Score Booster – Optimize Speed, Enable Cache & Page Preload | 39 | 59 | 27 | 10k+ | Unsafe printing function | ||
| #93 | DefendWP Firewall | 39 | 16 | 203 | 3k+ | Non-prefixed global variable | ||
| #94 | Async JavaScript | 37 | 357 | 79 | 70k+ | Unsafe printing function | ||
| #95 | bunny.net – WordPress CDN Plugin | 37 | 165 | 159 | 10k+ | Output is not escaped | ||
| #96 | Image Optimizer by 10web – Image Optimizer and Compression plugin | 37 | 244 | 45 | 3k+ | Text Domain Mismatch | ||
| #97 | Special Text Boxes | 37 | 38 | 42 | 2k+ | Direct Query | ||
| #98 | GoCache | 37 | 273 | 43 | 800 | Non Singular String Literal Domain | ||
| #99 | Speed Optimizer – The All-In-One Performance-Boosting Plugin | 36 | 45 | 96 | 1m+ | Non-prefixed hook name | ||
| #100 | Dynamic Front-End Heartbeat Control | 36 | 217 | 111 | 1k+ | Text Domain Mismatch |
