PluginScore

Most Improved Security WordPress Plugins

190 indexed plugins

Plugins

190

Active Installs

27m+

Average Score

53

Audited

190

Most Improved

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Proxy & VPN Blocker44741k+Nonce verification recommended
#2WEDOS | Protection & Cache Performance1001800trademarked term
#3Hostinger Tools8213223m+wp function not compatible with requires wp
#4Injection Guard3786451k+Unsafe printing function
#5WP Helper Premium243,9081,5151k+Text Domain Mismatch
#6Admin Menu Editor32159233300k+Non-prefixed global variable
#7Advanced Access Manager – Access Governance for WordPress3284962100k+Output is not escaped
#8Advanced Country Blocker4023772k+Exception output is not escaped
#9Advanced IP Blocker4094432k+Exception output is not escaped
#10All-In-One Security (AIOS) – Security and Firewall245521,2281m+Non-prefixed global variable
#11Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter315719650k+Nonce verification recommended
#12App for Cloudflare®981011k+wp function not compatible with requires wp
#13Activity Log – Monitor & Record User Changes3881149200k+Nonce verification recommended
#14Atomic Edge Security – Firewall, Malware Scan and Login Security4012184700Non-prefixed global variable
#15Login by Auth0373078210k+Text Domain Mismatch
#16Auto SRI9241500wp function not compatible with requires wp
#17Banhammer – Monitor Site Traffic, Block Bad Users and Bots371041741k+Output is not escaped
#18Kadence Security – Password, Two Factor Authentication, and Brute Force Protection231,053967700k+Missing Translators Comment
#19Blackhole for Bad Bots391236930k+Output is not escaped
#20BBQ Firewall – Fast & Powerful Firewall Security441717100k+Output is not escaped
#21Block wp-login98163600wp function not compatible with requires wp
#22Booter – Bots & Crawlers Manager68817k+Non-prefixed global variable
#23BotBlocker Security – Firewall & Bot Protection9953k+Non-prefixed constant
#24Brozzme DB Prefix & Tools Addons35244210k+Request data is not unslashed
#25BulletProof Security05,0484,94920k+Output is not escaped
#26Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms2249329510k+Text Domain Mismatch
#27AntiSpam for Contact Form 78614810k+Text Domain Mismatch
#28CloudGuard4141131k+Output is not escaped
#29CloudSecure WP Security2974350100k+Request data is not unslashed
#30Comment Form CSRF Protection70710500Request data is not unslashed
#31Companion Auto Update3315929850k+Direct Query
#32Control XML-RPC publishing9270400Text Domain Mismatch
#33CrowdSec351301192k+Output is not escaped
#34Content Security Policy Manager681922k+Output is not escaped
#35WebDefender Security – Protection & AntiSpam70176611k+wp function not compatible with requires wp
#36OpenID Connect Generic Client7395910k+Non-prefixed hook name
#37Dam Spam10011k+unexpected markdown file
#38DefendWP Firewall39162033k+Non-prefixed global variable
#39Defender Security – Malware Scanner, Login Security & Firewall2430651880k+Non-prefixed namespace
#40Disable File Editor9732500outdated tested upto header
#41Disable Registration Page8846400Text Domain Mismatch
#42Disable WP Registration Page Spam775121k+Nonce verification recommended
#43Easy Basic Authentication – Add basic auth to site or admin area461428600Input is not sanitized
#44Edit Lock414722500Non Singular String Literal Domain
#45Expire User Passwords353153k+Nonce verification recommended
#46Exploit Scanner37251308k+Non-prefixed global variable
#47Forget Spam Comment6751010k+Input is not sanitized
#48Lock Down Admin4230203k+Unsafe printing function
#49GD Security Headers254075211k+Output is not escaped
#50The GDPR Framework By Data443231,28751710k+Short PHP open tag found