Most Installed Shortcode WordPress Plugins
152 indexed plugins
Plugins
152
Active Installs
2m+
Average Score
70
Audited
152
Most Installed
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #101 | Podbean Shortcode | 94 | 22 | 2 | 900 | wp function not compatible with requires wp | ||
| #102 | BASE Item List | 35 | 4 | 13 | 800 | error log error log | ||
| #103 | Blog-in-Blog | 34 | 64 | 93 | 800 | Non-prefixed function | ||
| #104 | CC BMI Calculator | 40 | 135 | 7 | 800 | Output is not escaped | ||
| #105 | Clean My Archives | 98 | 4 | 0 | 800 | Missing direct file access protection | ||
| #106 | Sharing buttons shortcode for Jetpack | 98 | 3 | 2 | 800 | Missing direct file access protection | ||
| #107 | Last Updated Shortcode | 97 | 3 | 4 | 800 | Non-prefixed global variable | ||
| #108 | Shortcode Empty Paragraph Fix | 97 | 4 | 0 | 800 | Missing direct file access protection | ||
| #109 | Bloginfo Shortcode | 97 | 5 | 0 | 700 | Missing direct file access protection | ||
| #110 | Shortcode for Font Awesome | 98 | 2 | 1 | 700 | outdated tested upto header | ||
| #111 | Product Attributes Shortcode | 35 | 3 | 4 | 700 | Nonce verification recommended | ||
| #112 | WP Anywhere Widgets | 89 | 16 | 14 | 700 | wp function not compatible with requires wp | ||
| #113 | Bloginfo Shortcode | 97 | 4 | 1 | 700 | Missing direct file access protection | ||
| #114 | WP GoToWebinar | 28 | 207 | 207 | 700 | Non-prefixed function | ||
| #115 | Alligator Menu Popup | 87 | 4 | 1 | 600 | Missing Arg Domain | ||
| #116 | Blocks – Reusable Content, Shortcodes & Site Variables | 95 | 1 | 3 | 600 | Database parameter is not escaped | ||
| #117 | Enhanced AJAX Add to Cart for WooCommerce | 46 | 90 | 78 | 600 | Missing Arg Domain | ||
| #118 | Five-Star Ratings Shortcode | 23 | 604 | 1,317 | 600 | Non-prefixed global variable | ||
| #119 | List Child Pages Shortcode | 98 | 5 | 2 | 600 | wp function not compatible with requires wp | ||
| #120 | Relative URL ShortCode | 96 | 4 | 2 | 600 | outdated tested upto header | ||
| #121 | Simple Footnotes | 87 | 11 | 1 | 600 | wp function not compatible with requires wp | ||
| #122 | Super Cool Ad Inserter Plugin | 35 | 22 | 5 | 600 | Text Domain Mismatch | ||
| #123 | Webcomic | 25 | 593 | 308 | 600 | Output is not escaped | ||
| #124 | Amelia Calendar Essential Shortcodes | 96 | 2 | 9 | 500 | Not In Footer | ||
| #125 | Confetti Fall Animation | 92 | 2 | 5 | 500 | Non-prefixed class | ||
| #126 | Date Published Shortcode | 98 | 3 | 1 | 500 | Missing direct file access protection | ||
| #127 | Drop Cap Shortcode | 98 | 2 | 2 | 500 | Missing Version | ||
| #128 | Easy Panorama | 35 | 120 | 10 | 500 | Non Singular String Literal Domain | ||
| #129 | EZ SQL Reports Shortcode Widget and DB Backup | 27 | 165 | 158 | 500 | Output is not escaped | ||
| #130 | Footer Copyright | 98 | 1 | 2 | 500 | outdated tested upto header | ||
| #131 | Powie's WHOIS Domain Check | 41 | 38 | 11 | 500 | Unsafe printing function | ||
| #132 | Section Widget | 50 | 24 | 35 | 500 | Nonce verification recommended | ||
| #133 | Shortcode | 94 | 6 | 45 | 500 | Direct Query | ||
| #134 | Simple Ticker | 99 | 1 | 7 | 500 | Non-prefixed global variable | ||
| #135 | TechGasp Music Master | 41 | 143 | 4 | 500 | Output is not escaped | ||
| #136 | Tag Cloud Shortcode | 96 | 5 | 1 | 500 | Missing direct file access protection | ||
| #137 | Themify Store Locator | 31 | 244 | 125 | 500 | Text Domain Mismatch | ||
| #138 | Accordion Shortcode | 75 | 17 | 0 | 400 | Output is not escaped | ||
| #139 | AADMY – Add Auto Date Month Year Into Posts | 73 | 30 | 32 | 400 | Non-prefixed function | ||
| #140 | Checklist | 41 | 62 | 25 | 400 | Text Domain Mismatch | ||
| #141 | Checklist in Post | 81 | 14 | 7 | 400 | Missing Version | ||
| #142 | Hide Broken Shortcodes | 99 | 1 | 3 | 400 | unexpected markdown file | ||
| #143 | Hide Text Shortcode | 98 | 4 | 0 | 400 | Missing direct file access protection | ||
| #144 | Master QR Code Generator – Fast & Easy QR Code Creator | 77 | 21 | 59 | 400 | Non-prefixed global variable | ||
| #145 | Post Tiles | 40 | 46 | 5 | 400 | Output is not escaped | ||
| #146 | Post UI Tabs | 76 | 55 | 4 | 400 | Non Singular String Literal Domain | ||
| #147 | resmio button & widget | 37 | 99 | 36 | 400 | Text Domain Mismatch | ||
| #148 | sCode (Easy Shortcodes) | 35 | 157 | 97 | 400 | Text Domain Mismatch | ||
| #149 | Second Street | 98 | 10 | 6 | 400 | Non Enqueued Script | ||
| #150 | Shortcodes in Sidebar | 98 | 4 | 0 | 400 | Missing direct file access protection |
