PluginScore

Most Installed Shortcode WordPress Plugins

152 indexed plugins

Plugins

152

Active Installs

1m+

Average Score

69

Audited

152

Most Installed

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Shortcodes Ultimate – Content Elements246561,552400k+Non-prefixed global variable
#2MW WP Form27334219200k+Output is not escaped
#3Shortcoder — Create Shortcodes for Anything382570100k+Non-prefixed global variable
#4Display Posts – Easy lists, grids, navigation, and more92112380k+Non-prefixed function
#5Column Shortcodes5332960k+Unsafe printing function
#6eRecht24 Legal Texts100050k+No open findings
#7Shortcode in Menus982050k+outdated tested upto header
#8Advanced iFrame248871,12040k+Non-prefixed global variable
#9Insert Pages55523030k+Output is not escaped
#10Forget About Shortcode Buttons78112520k+Missing direct file access protection
#11Donations via PayPal401431720k+Output is not escaped
#12Post Snippets – Custom WordPress Code Snippets Customizer258031,65120k+Non-prefixed global variable
#13Reusable Blocks Extended42381520k+Output is not escaped
#14Team Members96151620k+Missing direct file access protection
#15Contact Form 7 Shortcode Enabler924310k+trademarked term
#16Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code3152513110k+Text Domain Mismatch
#17Content Blocks (Custom Post Widget)806210k+Output is not escaped
#18Responsive Pricing Table3830910510k+Non Singular String Literal Domain
#19Genesis Columns Advanced5526410k+Unsafe printing function
#20HTML Page Sitemap (Block and Shortcode)983410k+wp function not compatible with requires wp
#21Kaya QR Code Generator351934010k+Non Singular String Literal Domain
#22Meks Flexible Shortcodes41133110k+Unsafe printing function
#23Posts in Page95101210k+date date
#24Shortcode for Current Date66271210k+Text Domain Mismatch
#25Shortcode Redirect1001010k+Missing direct file access protection
#26Shortcode Widget100010k+No open findings
#27Simple Divi Shortcode895010k+Output is not escaped
#28Simple Map3510110k+Output is not escaped
#29Tabby Responsive Tabs6016510k+Output is not escaped
#30Events Shortcodes For The Events Calendar92910k+Non-prefixed constant
#31The Events Calendar Shortcode & Block367012710k+Non-prefixed hook name
#32WP Coder – Insert & Manage Code Snippets365328010k+Nonce verification recommended
#33WP Date and Time Shortcode40901210k+Output is not escaped
#34WP Shortcode by MyThemeShop5932510k+Output is not escaped
#35Wufoo Shortcode973310k+Missing direct file access protection
#36Dynamic Month & Year into Posts10018k+Non-prefixed constant
#37Themify Shortcodes3536167k+Output is not escaped
#38Automatic Copyright Year98406k+date date
#39Child Pages Shortcode35565k+Non-prefixed hook name
#40Disable Author Pages482355k+Unsafe printing function
#41SoundCloud Shortcode97615k+Missing Arg Domain
#42Basic URL ShortCodes97324k+mismatched plugin name
#43Bootstrap Shortcodes7121114k+Missing direct file access protection
#44Responsive Tabs915994k+Non Singular String Literal Domain
#45Snippet Shortcodes363801494k+Non Singular String Literal Domain
#46Shortcodes Finder10014k+Non-prefixed class
#47Spreaker Shortcode952334k+Text Domain Mismatch
#48YITH WooCommerce Product Slider Carousel303891,4794k+Non-prefixed global variable
#49Auto Copyright Year Updater98303k+Missing direct file access protection
#50Email Addon for Contact Form 798173k+Non-prefixed global variable