Most Downloaded Post WordPress Plugins
143 indexed plugins
Plugins
143
Active Installs
1m+
Average Score
59
Audited
142
Most Downloaded
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | Korea SNS | 39 | 88 | 30 | 4k+ | Unsafe printing function | ||
| #52 | WP To Top | 35 | 30 | 29 | 1k+ | Non-prefixed global variable | ||
| #53 | Permalink Editor | 40 | 50 | 28 | 1k+ | Output is not escaped | ||
| #54 | Share a Draft | 41 | 39 | 6 | 3k+ | Output is not escaped | ||
| #55 | Disable Title | 72 | 20 | 15 | 2k+ | Text Domain Mismatch | ||
| #56 | WP Image Borders | 70 | 47 | 6 | 2k+ | Text Domain Mismatch | ||
| #57 | Background Per Page | 33 | 80 | 56 | 700 | Text Domain Mismatch | ||
| #58 | Better REST API Featured Images | 98 | 4 | 1 | 2k+ | Deprecated parameter: load_plugin_textdomain parameter 2 | ||
| #59 | Custom Header Extended | 48 | 19 | 11 | 1k+ | Unsafe printing function | ||
| #60 | SEO Auto Linker | 39 | 97 | 62 | 3k+ | Unsafe printing function | ||
| #61 | Public Post Preview Configurator | 84 | 14 | 6 | 10k+ | Non Singular String Literal Domain | ||
| #62 | Ambrosite Next/Previous Post Link Plus | 69 | 12 | 24 | 5k+ | Interpolated SQL is not prepared | ||
| #63 | ShowID for Post/Page/Category/Tag/Comment | 97 | 5 | 1 | 8k+ | Missing direct file access protection | ||
| #64 | Featured Post with thumbnail | 24 | 158 | 122 | 400 | Output is not escaped | ||
| #65 | WP Advanced PDF | Pending | - | - | 800 | Pending scan | ||
| #66 | Sticky Posts – Switch | 41 | 84 | 5 | 6k+ | Output is not escaped | ||
| #67 | DX Delete Attached Media | 46 | 32 | 8 | 4k+ | Output is not escaped | ||
| #68 | Post Status Notifier Lite | 24 | 984 | 451 | 700 | Missing direct file access protection | ||
| #69 | Disable Author Pages | 48 | 23 | 5 | 6k+ | Unsafe printing function | ||
| #70 | Custom Post Order | 39 | 14 | 32 | 400 | Input is not sanitized | ||
| #71 | Preserve Code Formatting | 99 | 1 | 1 | 400 | outdated tested upto header | ||
| #72 | Admin Collapse Subpages | 82 | 4 | 12 | 4k+ | Nonce verification recommended | ||
| #73 | Post Notification by Email | 52 | 36 | 13 | 2k+ | Output is not escaped | ||
| #74 | Auto Image Alt Attribute | 55 | 26 | 7 | 6k+ | Unsafe printing function | ||
| #75 | WP Hide Show Featured Image | 50 | 36 | 5 | 4k+ | Unsafe printing function | ||
| #76 | WP Typograph Lite | 94 | 8 | 4 | 1k+ | trademarked term | ||
| #77 | Master Post Advert | 64 | 26 | 4 | 1k+ | Unsafe printing function | ||
| #78 | Featured Post | 40 | 36 | 18 | 800 | Output is not escaped | ||
| #79 | Tabify Edit Screen | 39 | 83 | 27 | 500 | Output is not escaped | ||
| #80 | LH Add Media From Url | 39 | 42 | 26 | 2k+ | Output is not escaped | ||
| #81 | PRyC WP: Add custom content to post and page (top/bottom) | 61 | 63 | 7 | 1k+ | Text Domain Mismatch | ||
| #82 | Cresta Posts Box | 59 | 10 | 13 | 1k+ | Output is not escaped | ||
| #83 | Autoremove Attachments | 98 | 2 | 5 | 3k+ | Non-prefixed function | ||
| #84 | Email Post Changes | 63 | 43 | 8 | 500 | Missing Arg Domain | ||
| #85 | Limit Post Add-On | 97 | 22 | 0 | 400 | wp function not compatible with requires wp | ||
| #86 | Quick Bulk Post & Page Creator | 55 | 43 | 1 | 2k+ | Text Domain Mismatch | ||
| #87 | Stealth Publish | 52 | 7 | 22 | 900 | Missing nonce verification | ||
| #88 | HiFi (Head Injection, Foot Injection) | 66 | 13 | 11 | 2k+ | Output is not escaped | ||
| #89 | Preserve Editor Scroll Position | 83 | 2 | 6 | 4k+ | Missing nonce verification | ||
| #90 | Custom Background Extended | 48 | 13 | 23 | 800 | Input is not validated | ||
| #91 | Require Post Category | 96 | 6 | 4 | 1k+ | Discouraged text-domain loading | ||
| #92 | Better Random Redirect | 39 | 88 | 40 | 700 | Text Domain Mismatch | ||
| #93 | Extended Post Status | 45 | 27 | 27 | 1k+ | Output is not escaped | ||
| #94 | User Posts Limit | 44 | 82 | 22 | 2k+ | Output is not escaped | ||
| #95 | Hide Broken Shortcodes | 99 | 1 | 3 | 400 | unexpected markdown file | ||
| #96 | Insert JavaScript and CSS | 41 | 64 | 19 | 400 | Text Domain Mismatch | ||
| #97 | Simple Export Import for ACF Data | 35 | 19 | 64 | 1k+ | Request data is not unslashed | ||
| #98 | wpuntexturize | 98 | 1 | 6 | 900 | trademarked term | ||
| #99 | WP Lorem ipsum | 41 | 37 | 29 | 500 | Unsafe printing function | ||
| #100 | Multiple Post Passwords | 61 | 13 | 15 | 2k+ | Output is not escaped |
