PluginScore

Security WordPress Plugins with Most Issues

196 indexed plugins

Plugins

196

Active Installs

27m+

Average Score

54

Audited

196

Most Issues

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output is not escaped
#2WP Helper Premium244,0001,5901k+Text Domain Mismatch
#3Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#4Jetpack – WP Security, Backup, Speed, & Growth222,9751,3483m+Text Domain Mismatch
#5InfiniteWP Client232,2871,811200k+Exception output is not escaped
#6NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2632,046100k+Non-prefixed global variable
#7SecuPress with Simple SSL – Simple and Performant Security241,6951,60040k+Non-prefixed global variable
#8Kadence Security – Password, Two Factor Authentication, and Brute Force Protection211,060957700k+Missing Translators Comment
#9Security Plugin, Firewall & Malware Scanner with Auto Removal231,20478940k+Output is not escaped
#10All-In-One Security (AIOS) – Security and Firewall245521,2281m+Non-prefixed global variable
#11The GDPR Framework By Data443231,27749810k+Short PHP open tag found
#12Anti-Malware Security and Brute-Force Firewall23543965100k+Output is not escaped
#13WP-WebAuthn229573962k+Exception output is not escaped
#14WebTotem Security211,110213900Text Domain Mismatch
#15Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820230k+Missing Translators Comment
#16Loginizer258145041m+Output is not escaped
#17Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention256176141m+Unsafe printing function
#18NinjaScanner – Virus & Malware scan2259655130k+Non-prefixed global variable
#19Defender Security – Malware Scanner, Login Security & Firewall2455059380k+Non-prefixed namespace
#20Login With Ajax – Fast Logins, 2FA, Redirects2362352010k+Output is not escaped
#21Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms245635484k+Text Domain Mismatch
#22SP Move Login268812156k+Text Domain Mismatch
#23RSFirewall!245635214k+Output is not escaped
#24ManageWP Worker235065651m+Non-prefixed class
#25IP Geo Block233995898k+Output is not escaped
#26Nexter Extension – Security, Performance, Code Snippets & Site Toolkit2419377110k+Nonce verification recommended
#27GD Security Headers254075211k+Output is not escaped
#28WPS Cleaner3043049120k+Output is not escaped
#29Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195363793m+Missing Translators Comment
#30Advanced Access Manager – Access Governance for WordPress3284962100k+Output is not escaped
#31WPFront User Role Editor3533357830k+Output is not escaped
#32OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA)262736126k+Request data is not unslashed
#33Jetpack Protect30657217100k+Text Domain Mismatch
#34WPScan – WordPress Security Scanner215272658k+Text Domain Mismatch
#35Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms2249329510k+Text Domain Mismatch
#36Simply Static – The Static Site Generator2519053430k+Non-prefixed hook name
#37SiteGuard WP Plugin24359350500k+Output is not escaped
#38WPOrLogin – Custom Login, Social Login, Limit Attempts, Hide Login & reCAPTCHA314832172k+Unsafe printing function
#39Restrict Usernames Emails Characters323273671k+Output is not escaped
#40Kadence Central – Site Management, Backups, Security, and Reporting2646221330k+Text Domain Mismatch
#41Wordfence Login Security2524841860k+Output is not escaped
#42Staatic – Static Site Generator for WordPress314201953k+SQL query is not prepared
#43Patchstack – WordPress & Plugins Security2410447850k+Missing nonce verification
#44WP EXtra – One Click Optimize334141016k+Missing Arg Domain
#45WP Hide & Security Enhancer2712437550k+Input is not sanitized
#46Security Ninja – WordPress Security & Firewall291493477k+Direct Query
#47Zero Spam for WordPress347939320k+Non-prefixed global variable
#48Companion Auto Update3315929840k+Direct Query
#49Keyring352332031k+Output is not escaped
#50Jetpack VaultPress287136210k+Missing nonce verification