PluginScore

Most Installed Security WordPress Plugins

196 indexed plugins

Plugins

196

Active Installs

27m+

Average Score

54

Audited

196

Most Installed

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#2Hostinger Tools8213223m+wp function not compatible with requires wp
#3Jetpack – WP Security, Backup, Speed, & Growth222,9751,3483m+Text Domain Mismatch
#4Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195363793m+Missing Translators Comment
#5All-In-One Security (AIOS) – Security and Firewall245521,2281m+Non-prefixed global variable
#6Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention256176141m+Unsafe printing function
#7Loginizer258145041m+Output is not escaped
#8Safe SVG98741m+Missing Arg Domain
#9Security Optimizer – The All-In-One Protection Plugin3540861m+Input is not sanitized
#10ManageWP Worker235065651m+Non-prefixed class
#11Kadence Security – Password, Two Factor Authentication, and Brute Force Protection211,060957700k+Missing Translators Comment
#12MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites384136700k+Non-prefixed hook name
#13User Role Editor43117145700k+Output is not escaped
#14Sucuri Security – Auditing, Malware Scanner and Security Hardening825111600k+Missing direct file access protection
#15SiteGuard WP Plugin24359350500k+Output is not escaped
#16Admin Menu Editor32159233300k+Non-prefixed global variable
#17Limit Login Attempts408138300k+Output is not escaped
#18Activity Log – Monitor & Record User Changes3881149200k+Nonce verification recommended
#19InfiniteWP Client232,2871,811200k+Exception output is not escaped
#20Advanced Access Manager – Access Governance for WordPress3284962100k+Output is not escaped
#21BBQ Firewall – Fast & Powerful Firewall Security441717100k+Output is not escaped
#22CloudSecure WP Security2974333100k+Request data is not unslashed
#23Anti-Malware Security and Brute-Force Firewall23543965100k+Output is not escaped
#24WP Ghost (Hide My WP Ghost) – Security & Firewall856397100k+Non-prefixed global variable
#25Jetpack Protect30657217100k+Text Domain Mismatch
#26NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2632,046100k+Non-prefixed global variable
#27Two Factor421870100k+Nonce verification recommended
#28WPS Limit Login3915276100k+Output is not escaped
#29Defender Security – Malware Scanner, Login Security & Firewall2455059380k+Non-prefixed namespace
#30Stream – Activity Log & Audit Trail8088180k+Direct Query
#31Login No Captcha reCAPTCHA42452460k+Unsafe printing function
#32Wordfence Login Security2524841860k+Output is not escaped
#33WP fail2ban – Advanced Security327515360k+Dynamic hook name
#34Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter315719650k+Nonce verification recommended
#35Patchstack – WordPress & Plugins Security2410447850k+Missing nonce verification
#36Stop User Enumeration991150k+Dynamic hook name
#37WP Hide & Security Enhancer2712437550k+Input is not sanitized
#38Companion Auto Update3315929840k+Direct Query
#39Modular DS: Monitor, update, and backup multiple websites211598240k+Exception output is not escaped
#40SecuPress with Simple SSL – Simple and Performant Security241,6951,60040k+Non-prefixed global variable
#41Security Plugin, Firewall & Malware Scanner with Auto Removal231,20478940k+Output is not escaped
#42underConstruction36986040k+Unsafe printing function
#43Blackhole for Bad Bots391236930k+Output is not escaped
#44Kadence Central – Site Management, Backups, Security, and Reporting2646221330k+Text Domain Mismatch
#45NinjaScanner – Virus & Malware scan2259655130k+Non-prefixed global variable
#46Protect Uploads992130k+Missing direct file access protection
#47Simply Static – The Static Site Generator2519053430k+Non-prefixed hook name
#48Stop Spammers Classic94185130k+wp function not compatible with requires wp
#49Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820230k+Missing Translators Comment
#50WPFront User Role Editor3533357830k+Output is not escaped