Post WordPress Plugins with Most Issues
143 indexed plugins
Plugins
143
Active Installs
1m+
Average Score
59
Audited
142
Most Issues
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | Like This | 38 | 60 | 17 | 1k+ | Output is not escaped | ||
| #52 | Simple Revision Control | 41 | 34 | 43 | 1k+ | Dynamic hook name | ||
| #53 | Add From Server | 37 | 52 | 20 | 60k+ | Output is not escaped | ||
| #54 | PRyC WP: Add custom content to post and page (top/bottom) | 61 | 63 | 7 | 1k+ | Text Domain Mismatch | ||
| #55 | LH Add Media From Url | 39 | 42 | 26 | 2k+ | Output is not escaped | ||
| #56 | Post title marquee scroll | 43 | 43 | 25 | 1k+ | Output is not escaped | ||
| #57 | WP Lorem ipsum | 41 | 37 | 29 | 500 | Unsafe printing function | ||
| #58 | Radio Buttons for Taxonomies | 39 | 40 | 24 | 20k+ | Output is not escaped | ||
| #59 | XPoster – Share to Bluesky and Mastodon | 62 | 26 | 36 | 10k+ | Missing nonce verification | ||
| #60 | WP To Top | 35 | 30 | 29 | 1k+ | Non-prefixed global variable | ||
| #61 | Post Duplicator | 60 | 33 | 24 | 200k+ | Missing direct file access protection | ||
| #62 | Extended Post Status | 45 | 27 | 27 | 1k+ | Output is not escaped | ||
| #63 | Featured Post | 40 | 36 | 18 | 800 | Output is not escaped | ||
| #64 | WP Image Borders | 70 | 47 | 6 | 2k+ | Text Domain Mismatch | ||
| #65 | I Recommend This – Love/Like Button for WordPress Posts | 87 | 3 | 49 | 5k+ | Direct Query | ||
| #66 | Email Post Changes | 63 | 43 | 8 | 500 | Missing Arg Domain | ||
| #67 | Post Notification by Email | 52 | 36 | 13 | 2k+ | Output is not escaped | ||
| #68 | Companion Revision Manager – Revision Control | 42 | 18 | 28 | 4k+ | Unsafe printing function | ||
| #69 | Custom Post Order | 39 | 14 | 32 | 400 | Input is not sanitized | ||
| #70 | Press This | 70 | 1 | 44 | 5k+ | Non-prefixed hook name | ||
| #71 | Share a Draft | 41 | 39 | 6 | 3k+ | Output is not escaped | ||
| #72 | Quick Bulk Post & Page Creator | 55 | 43 | 1 | 2k+ | Text Domain Mismatch | ||
| #73 | Change Background Color for Pages, Posts, Widgets | 42 | 35 | 7 | 500 | Text Domain Mismatch | ||
| #74 | WP Hide Show Featured Image | 50 | 36 | 5 | 4k+ | Unsafe printing function | ||
| #75 | DX Delete Attached Media | 46 | 32 | 8 | 4k+ | Output is not escaped | ||
| #76 | Post Cloner | 41 | 25 | 15 | 1k+ | Text Domain Mismatch | ||
| #77 | Hide Featured Image | 42 | 26 | 12 | 10k+ | Unsafe printing function | ||
| #78 | Simple Copy Post Button | 53 | 14 | 24 | 400 | Input is not sanitized | ||
| #79 | Ambrosite Next/Previous Post Link Plus | 69 | 12 | 24 | 5k+ | Interpolated SQL is not prepared | ||
| #80 | Custom Background Extended | 48 | 13 | 23 | 800 | Input is not validated | ||
| #81 | Reveal IDs | 35 | 23 | 13 | 40k+ | Output is not escaped | ||
| #82 | Disable Title | 72 | 20 | 15 | 2k+ | Text Domain Mismatch | ||
| #83 | Auto Image Alt Attribute | 55 | 26 | 7 | 6k+ | Unsafe printing function | ||
| #84 | WP Old Post Date Remover | 57 | 25 | 7 | 2k+ | Unsafe printing function | ||
| #85 | Embed Iframe | 69 | 25 | 6 | 2k+ | wp function not compatible with requires wp | ||
| #86 | Remove noreferrer | 79 | 17 | 14 | 5k+ | Missing Arg Domain | ||
| #87 | Custom Header Extended | 48 | 19 | 11 | 1k+ | Unsafe printing function | ||
| #88 | LINE Auto Post | 45 | 19 | 11 | 500 | Heredoc Output Not Escaped | ||
| #89 | Master Post Advert | 64 | 26 | 4 | 1k+ | Unsafe printing function | ||
| #90 | Stealth Publish | 52 | 7 | 22 | 900 | Missing nonce verification | ||
| #91 | Category Sticky Post | 63 | 4 | 24 | 3k+ | Missing nonce verification | ||
| #92 | Disable Author Pages | 48 | 23 | 5 | 6k+ | Unsafe printing function | ||
| #93 | Multiple Post Passwords | 61 | 13 | 15 | 2k+ | Output is not escaped | ||
| #94 | WP Post Branches | 67 | 16 | 12 | 4k+ | Nonce verification recommended | ||
| #95 | WP-UTF8-Excerpt | 61 | 17 | 10 | 700 | Unsafe printing function | ||
| #96 | Require Featured Image | 56 | 20 | 6 | 3k+ | Output is not escaped | ||
| #97 | HiFi (Head Injection, Foot Injection) | 66 | 13 | 11 | 2k+ | Output is not escaped | ||
| #98 | Replace Protected Password | 56 | 6 | 18 | 600 | Input is not sanitized | ||
| #99 | Simple Regenerate Slug | 48 | 18 | 6 | 400 | Unsafe printing function | ||
| #100 | Cresta Posts Box | 59 | 10 | 13 | 1k+ | Output is not escaped |
