Posts WordPress Plugins with Most Issues
126 indexed plugins
Plugins
126
Active Installs
1m+
Average Score
61
Audited
126
Most Issues
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | Bulk Images to Posts | 41 | 55 | 5 | 1k+ | Unsafe printing function | ||
| #52 | Query Posts | 63 | 53 | 6 | 800 | Output is not escaped | ||
| #53 | WP To Top | 35 | 30 | 29 | 1k+ | Non-prefixed global variable | ||
| #54 | Post Duplicator | 60 | 33 | 24 | 200k+ | Missing direct file access protection | ||
| #55 | Simple Post Expiration | 49 | 47 | 10 | 400 | Text Domain Mismatch | ||
| #56 | Featured Post | 40 | 36 | 18 | 800 | Output is not escaped | ||
| #57 | WP Image Borders | 70 | 47 | 6 | 2k+ | Text Domain Mismatch | ||
| #58 | Raw HTML | 66 | 17 | 35 | 10k+ | Non-prefixed function | ||
| #59 | Bulk Actions Select All | 53 | 26 | 22 | 800 | Text Domain Mismatch | ||
| #60 | Expanding Archives | 54 | 37 | 9 | 3k+ | Output is not escaped | ||
| #61 | Custom Layouts – Post + Product grids made easy | 89 | 23 | 22 | 3k+ | Missing Translators Comment | ||
| #62 | Quick Bulk Post & Page Creator | 55 | 43 | 1 | 2k+ | Text Domain Mismatch | ||
| #63 | Admin filter posts by year | 64 | 8 | 32 | 400 | Non-prefixed function | ||
| #64 | Page Tagger | 55 | 30 | 10 | 2k+ | Output is not escaped | ||
| #65 | Post Cloner | 41 | 25 | 15 | 1k+ | Text Domain Mismatch | ||
| #66 | Bulk Post Importer | 84 | 1 | 38 | 700 | Missing nonce verification | ||
| #67 | Reading Time WP | 89 | 5 | 33 | 30k+ | Non-prefixed global variable | ||
| #68 | Redirect | 51 | 26 | 12 | 5k+ | Output is not escaped | ||
| #69 | WP Smart Preloader | 68 | 27 | 10 | 5k+ | Output is not escaped | ||
| #70 | Advanced Posts Listing – Show Post List Easily | 98 | 31 | 5 | 4k+ | Missing Arg Domain | ||
| #71 | Custom Background Extended | 48 | 13 | 23 | 800 | Input is not validated | ||
| #72 | Auto Update Post Date | 69 | 11 | 23 | 2k+ | Input is not validated | ||
| #73 | Display Posts – Easy lists, grids, navigation, and more | 92 | 11 | 23 | 80k+ | Non-prefixed function | ||
| #74 | FD Footnotes Plugin | 77 | 28 | 5 | 1k+ | Non Singular String Literal Domain | ||
| #75 | No External Links | 85 | 7 | 26 | 4k+ | Database parameter is not escaped | ||
| #76 | Random Post for Widget | 58 | 27 | 5 | 2k+ | Output is not escaped | ||
| #77 | Clean Archives Reloaded | 55 | 25 | 6 | 500 | Unsafe printing function | ||
| #78 | Custom Header Extended | 48 | 19 | 11 | 1k+ | Unsafe printing function | ||
| #79 | WP Revisions Limit | 74 | 16 | 14 | 800 | Missing Arg Domain | ||
| #80 | Jarvis | 35 | 10 | 19 | 500 | Input is not validated | ||
| #81 | Posts List | 77 | 11 | 15 | 7k+ | Non-prefixed hook name | ||
| #82 | Auto Tag Creator | 98 | 23 | 1 | 1k+ | Text Domain Mismatch | ||
| #83 | Expire Sticky Posts | 68 | 16 | 8 | 1k+ | Text Domain Mismatch | ||
| #84 | HiFi (Head Injection, Foot Injection) | 66 | 13 | 11 | 2k+ | Output is not escaped | ||
| #85 | Sortable Word Count Reloaded | 68 | 18 | 6 | 2k+ | Output is not escaped | ||
| #86 | Cresta Posts Box | 59 | 10 | 13 | 1k+ | Output is not escaped | ||
| #87 | Per Page Sidebars | 67 | 12 | 11 | 900 | Input is not validated | ||
| #88 | WP Telegram (Auto Post and Notifications) | 95 | 8 | 15 | 30k+ | Non-prefixed function | ||
| #89 | Bulk Post Category Creator | 91 | 20 | 2 | 1k+ | Text Domain Mismatch | ||
| #90 | Posts in Page | 95 | 10 | 12 | 10k+ | date date | ||
| #91 | Bulk Datetime Change | 96 | 3 | 18 | 6k+ | Non-prefixed global variable | ||
| #92 | Public Post Preview Configurator | 84 | 14 | 6 | 10k+ | Non Singular String Literal Domain | ||
| #93 | Public Post Preview | 57 | 8 | 11 | 100k+ | Nonce verification recommended | ||
| #94 | Post Updated Date | 76 | 17 | 1 | 500 | Output is not escaped | ||
| #95 | WP Display Header | 98 | 15 | 3 | 7k+ | Text Domain Mismatch | ||
| #96 | Add Widget After Content | 70 | 6 | 11 | 7k+ | Setting is missing a sanitization callback | ||
| #97 | Advanced Queries | 86 | 6 | 11 | 10k+ | Non-prefixed constant | ||
| #98 | Category Featured Images | 68 | 5 | 12 | 600 | Input is not sanitized | ||
| #99 | GenerateBlocks | 97 | 9 | 8 | 200k+ | file system operations is writable | ||
| #100 | Newpost Catch | 97 | 2 | 15 | 10k+ | Non-prefixed hook name |