Most Downloaded Shortcode WordPress Plugins
151 indexed plugins
Plugins
151
Active Installs
2m+
Average Score
69
Audited
151
Most Downloaded
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Shortcodes Ultimate – Content Elements | 24 | 656 | 1,552 | 400k+ | Non-prefixed global variable | ||
| #2 | Advanced iFrame | 24 | 887 | 1,120 | 40k+ | Non-prefixed global variable | ||
| #3 | Shortcoder — Create Shortcodes for Anything | 37 | 25 | 70 | 100k+ | Non-prefixed global variable | ||
| #4 | MW WP Form | 27 | 334 | 219 | 200k+ | Output is not escaped | ||
| #5 | Display Posts – Easy lists, grids, navigation, and more | 92 | 11 | 23 | 80k+ | Non-prefixed function | ||
| #6 | Insert Pages | 55 | 52 | 30 | 40k+ | Output is not escaped | ||
| #7 | WP Shortcode by MyThemeShop | 59 | 32 | 5 | 10k+ | Output is not escaped | ||
| #8 | Donations via PayPal | 40 | 143 | 17 | 20k+ | Output is not escaped | ||
| #9 | Column Shortcodes | 53 | 32 | 9 | 60k+ | Unsafe printing function | ||
| #10 | Post Snippets – Custom WordPress Code Snippets Customizer | 25 | 808 | 1,654 | 20k+ | Non-prefixed global variable | ||
| #11 | The Events Calendar Shortcode & Block | 36 | 70 | 127 | 10k+ | Non-prefixed hook name | ||
| #12 | Team Members | 96 | 15 | 16 | 20k+ | Missing direct file access protection | ||
| #13 | Content Blocks (Custom Post Widget) | 80 | 6 | 2 | 10k+ | Output is not escaped | ||
| #14 | Events Shortcodes For The Events Calendar | 100 | 3 | 10k+ | Non-prefixed class | |||
| #15 | Shortcode in Menus | 98 | 2 | 0 | 50k+ | outdated tested upto header | ||
| #16 | Responsive Pricing Table | 38 | 309 | 105 | 10k+ | Non Singular String Literal Domain | ||
| #17 | Meks Flexible Shortcodes | 41 | 133 | 1 | 10k+ | Unsafe printing function | ||
| #18 | Shortcode Widget | 100 | 0 | 10k+ | No open findings | |||
| #19 | SoundCloud Shortcode | 97 | 6 | 1 | 5k+ | Missing Arg Domain | ||
| #20 | HTML Page Sitemap (Block and Shortcode) | 98 | 3 | 4 | 10k+ | wp function not compatible with requires wp | ||
| #21 | Forget About Shortcode Buttons | 78 | 11 | 25 | 20k+ | Missing direct file access protection | ||
| #22 | WP Coder – Insert & Manage Code Snippets | 36 | 53 | 280 | 10k+ | Nonce verification recommended | ||
| #23 | Posts in Page | 95 | 10 | 12 | 10k+ | date date | ||
| #24 | YITH WooCommerce Product Slider Carousel | 30 | 389 | 1,479 | 4k+ | Non-prefixed global variable | ||
| #25 | Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code | 31 | 525 | 131 | 10k+ | Text Domain Mismatch | ||
| #26 | Tabby Responsive Tabs | 60 | 16 | 5 | 10k+ | Output is not escaped | ||
| #27 | Simple Map | 35 | 10 | 1 | 10k+ | Output is not escaped | ||
| #28 | Shortcode for Current Date | 66 | 27 | 12 | 10k+ | Text Domain Mismatch | ||
| #29 | Wufoo Shortcode | 97 | 3 | 3 | 10k+ | Missing direct file access protection | ||
| #30 | oik | 22 | 489 | 180 | 2k+ | Non Singular String Literal Domain | ||
| #31 | WP Spell Check | 25 | 4,425 | 2k+ | Direct Query | |||
| #32 | Coupon Creator | 25 | 698 | 412 | 1k+ | Output is not escaped | ||
| #33 | W4 Post List | 35 | 50 | 138 | 3k+ | Non-prefixed global variable | ||
| #34 | Etsy Shop | 42 | 58 | 21 | 3k+ | Unsafe printing function | ||
| #35 | WP Date and Time Shortcode | 40 | 90 | 12 | 10k+ | Output is not escaped | ||
| #36 | Kaya QR Code Generator | 35 | 193 | 40 | 20k+ | Non Singular String Literal Domain | ||
| #37 | Themify Shortcodes | 35 | 36 | 16 | 7k+ | Output is not escaped | ||
| #38 | Genesis Columns Advanced | 55 | 26 | 4 | 10k+ | Unsafe printing function | ||
| #39 | Responsive Tabs | 91 | 59 | 9 | 4k+ | Non Singular String Literal Domain | ||
| #40 | Get Custom Field Values | 37 | 40 | 44 | 1k+ | Output is not escaped | ||
| #41 | Snippet Shortcodes | 37 | 359 | 133 | 4k+ | Non Singular String Literal Domain | ||
| #42 | Decent Comments | 38 | 93 | 28 | 2k+ | Output is not escaped | ||
| #43 | Bootstrap Shortcodes | 71 | 21 | 11 | 5k+ | Missing direct file access protection | ||
| #44 | Reusable Blocks Extended | 42 | 38 | 15 | 20k+ | Output is not escaped | ||
| #45 | Blog-in-Blog | 34 | 64 | 93 | 800 | Non-prefixed function | ||
| #46 | Slideshow | 97 | 4 | 2 | 1k+ | Post Not In exclude | ||
| #47 | Shortcode Redirect | 100 | 1 | 0 | 10k+ | Missing direct file access protection | ||
| #48 | Dynamic Month & Year into Posts | 99 | 5 | 1 | 8k+ | wp function not compatible with requires wp | ||
| #49 | Shortcodes Finder | 100 | 1 | 4k+ | Non-prefixed class | |||
| #50 | Post Content Shortcodes | 35 | 205 | 56 | 2k+ | Output is not escaped |
