PluginScore

Most Installed Security WordPress Plugins

137 indexed plugins

Plugins

137

Active Installs

27m+

Average Score

47

Audited

124

Most Installed

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#2Hostinger Tools8114223m+wp function not compatible with requires wp
#3Jetpack – WP Security, Backup, Speed, & Growth232,8211,3033m+Text Domain Mismatch
#4Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195413853m+Missing Translators Comment
#5All-In-One Security (AIOS) – Security and Firewall245521,2281m+Non Prefixed Variable Found
#6Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention256216021m+Unsafe Printing Function
#7Loginizer258145041m+Output Not Escaped
#8Safe SVG98741m+Missing Arg Domain
#9Security Optimizer – The All-In-One Protection Plugin3540821m+Missing Unslash
#10ManageWP Worker225075651m+Non Prefixed Class Found
#11Kadence Security – Password, Two Factor Authentication, and Brute Force Protection231,053967700k+Missing Translators Comment
#12MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites383136700k+Non Prefixed Hookname Found
#13User Role Editor43117145700k+Output Not Escaped
#14Sucuri Security – Auditing, Malware Scanner and Security Hardening94525600k+missing direct file access protection
#15SiteGuard WP Plugin24329333500k+Output Not Escaped
#16Admin Menu Editor32159233300k+Non Prefixed Variable Found
#17Limit Login Attempts408138300k+Output Not Escaped
#18Activity Log – Monitor & Record User Changes3881149200k+Recommended
#19InfiniteWP Client222,2861,812200k+Exception Not Escaped
#20Advanced Access Manager – Access Governance for WordPress3284962100k+Output Not Escaped
#21BBQ Firewall – Fast & Powerful Firewall Security441717100k+Output Not Escaped
#22CloudSecure WP Security2974350100k+Missing Unslash
#23Anti-Malware Security and Brute-Force Firewall22544965100k+Output Not Escaped
#24WP Ghost (Hide My WP Ghost) – Security & Firewall856373100k+Non Prefixed Variable Found
#25Jetpack Protect30657217100k+Text Domain Mismatch
#26NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2652,065100k+Non Prefixed Variable Found
#27Two Factor421870100k+Recommended
#28WPS Limit Login3915276100k+Output Not Escaped
#29Defender Security – Malware Scanner, Login Security & Firewall2430651880k+Non Prefixed Namespace Found
#30Wordfence Login Security2524841870k+Output Not Escaped
#31Login No Captcha reCAPTCHA42452460k+Unsafe Printing Function
#32WP fail2ban – Advanced Security327515360k+Dynamic Hookname Found
#33Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter315719650k+Recommended
#34Companion Auto Update3315929850k+Direct Query
#35Stop User Enumeration991150k+Dynamic Hookname Found
#36WP Hide & Security Enhancer2712437550k+Input Not Sanitized
#37Modular DS: Monitor, update, and backup multiple websites211618140k+Exception Not Escaped
#38Patchstack – WordPress & Plugins Security2310748940k+Missing
#39Protect Uploads992140k+missing direct file access protection
#40SecuPress with Simple SSL – Simple and Performant Security231,6961,59040k+Non Prefixed Variable Found
#41underConstruction36986040k+Unsafe Printing Function
#42Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820240k+Missing Translators Comment
#43Blackhole for Bad Bots391236930k+Output Not Escaped
#44Kadence Central – Site Management, Backups, Security, and Reporting2646221330k+Text Domain Mismatch
#45NinjaScanner – Virus & Malware scan2259655130k+Non Prefixed Variable Found
#46Security Plugin, Firewall & Malware Scanner with Auto Removal241,19178830k+Output Not Escaped
#47Simply Static – The Static Site Generator2516344630k+Non Prefixed Hookname Found
#48Stop Spammers Classic94185130k+wp function not compatible with requires wp
#49WPFront User Role Editor3533357830k+Output Not Escaped
#50XO Security945330k+wp function not compatible with requires wp