Settings WordPress Plugins That Need Review
15 indexed plugins
Plugins
15
Active Installs
1m+
Average Score
63
Audited
15
Needs Review
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | CMB2 | 36 | 148 | 19 | 300k+ | Output is not escaped | ||
| #2 | Custom PHP Settings | 36 | 153 | 76 | 10k+ | Output is not escaped | ||
| #3 | One Click Demo Import | 38 | 22 | 84 | 1m+ | Non-prefixed global variable | ||
| #4 | ThemeKit For WordPress | 39 | 149 | 49 | 700 | Output is not escaped | ||
| #5 | Admin Options Pages | 42 | 3 | 284 | 500 | Nonce verification recommended | ||
| #6 | Simple HTML Sitemap | 42 | 42 | 20 | 1k+ | Text Domain Mismatch | ||
| #7 | Custom Global Variables | 65 | 14 | 12 | 5k+ | Output is not escaped | ||
| #8 | Custom Posts Per Page | 66 | 20 | 2 | 900 | Unsafe printing function | ||
| #9 | Custom Posts Per Page Reloaded | 66 | 40 | 3 | 700 | Text Domain Mismatch | ||
| #10 | WP Logout Redirect | 67 | 20 | 5 | 400 | Unsafe printing function | ||
| #11 | Import / Export Customizer Settings | 79 | 5 | 13 | 50k+ | Input is not sanitized | ||
| #12 | Starter Templates by Gradient Themes | 83 | 27 | 7 | 3k+ | Text Domain Mismatch | ||
| #13 | CFS Options Screens | 93 | 10 | 5 | 400 | Text Domain Mismatch | ||
| #14 | OptionTree | 93 | 165 | 2 | 50k+ | Text Domain Mismatch | ||
| #15 | Catch Themes Demo Import | 96 | 1 | 5 | 5k+ | Non-prefixed hook name |
