PluginScore

Most Installed Security WordPress Plugins

190 indexed plugins

Plugins

190

Active Installs

27m+

Average Score

53

Audited

190

Most Installed

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#2Hostinger Tools8213223m+wp function not compatible with requires wp
#3Jetpack – WP Security, Backup, Speed, & Growth232,8211,3033m+Text Domain Mismatch
#4Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195403893m+Missing Translators Comment
#5All-In-One Security (AIOS) – Security and Firewall245521,2281m+Non-prefixed global variable
#6Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention256186051m+Unsafe printing function
#7Loginizer258145041m+Output is not escaped
#8Safe SVG98741m+Missing Arg Domain
#9Security Optimizer – The All-In-One Protection Plugin3540841m+Request data is not unslashed
#10ManageWP Worker225075651m+Non-prefixed class
#11Kadence Security – Password, Two Factor Authentication, and Brute Force Protection231,053967700k+Missing Translators Comment
#12MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites383136700k+Non-prefixed hook name
#13User Role Editor43117145700k+Output is not escaped
#14Sucuri Security – Auditing, Malware Scanner and Security Hardening94525600k+Missing direct file access protection
#15SiteGuard WP Plugin24359350500k+Output is not escaped
#16Admin Menu Editor32159233300k+Non-prefixed global variable
#17Limit Login Attempts408138300k+Output is not escaped
#18Activity Log – Monitor & Record User Changes3881149200k+Nonce verification recommended
#19InfiniteWP Client222,2861,812200k+Exception output is not escaped
#20Advanced Access Manager – Access Governance for WordPress3284962100k+Output is not escaped
#21BBQ Firewall – Fast & Powerful Firewall Security441717100k+Output is not escaped
#22CloudSecure WP Security2974350100k+Request data is not unslashed
#23Anti-Malware Security and Brute-Force Firewall23543965100k+Output is not escaped
#24WP Ghost (Hide My WP Ghost) – Security & Firewall856373100k+Non-prefixed global variable
#25Jetpack Protect30657217100k+Text Domain Mismatch
#26NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2662,059100k+Non-prefixed global variable
#27Two Factor421870100k+Nonce verification recommended
#28WPS Limit Login3915276100k+Output is not escaped
#29Defender Security – Malware Scanner, Login Security & Firewall2430651880k+Non-prefixed namespace
#30Wordfence Login Security2524841870k+Output is not escaped
#31Login No Captcha reCAPTCHA42452460k+Unsafe printing function
#32WP fail2ban – Advanced Security327515360k+Dynamic hook name
#33Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter315719650k+Nonce verification recommended
#34Companion Auto Update3315929850k+Direct Query
#35Stop User Enumeration991150k+Dynamic hook name
#36WP Hide & Security Enhancer2712437550k+Input is not sanitized
#37Modular DS: Monitor, update, and backup multiple websites211598140k+Exception output is not escaped
#38Patchstack – WordPress & Plugins Security2310748940k+Missing nonce verification
#39SecuPress with Simple SSL – Simple and Performant Security231,6971,60140k+Non-prefixed global variable
#40underConstruction36986040k+Unsafe printing function
#41Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820240k+Missing Translators Comment
#42Blackhole for Bad Bots391236930k+Output is not escaped
#43Kadence Central – Site Management, Backups, Security, and Reporting2646221330k+Text Domain Mismatch
#44NinjaScanner – Virus & Malware scan2259655130k+Non-prefixed global variable
#45Protect Uploads992130k+Missing direct file access protection
#46Security Plugin, Firewall & Malware Scanner with Auto Removal241,18877030k+Output is not escaped
#47Simply Static – The Static Site Generator2516544830k+Non-prefixed hook name
#48Stop Spammers Classic94185130k+wp function not compatible with requires wp
#49WPFront User Role Editor3533357830k+Output is not escaped
#50XO Security945330k+wp function not compatible with requires wp