PluginScore

Shortcode WordPress Plugins with Most Issues

152 indexed plugins

Plugins

152

Active Installs

2m+

Average Score

70

Audited

152

Most Issues

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1WP Spell Check2594,3652k+Direct Query
#2Post Snippets – Custom WordPress Code Snippets Customizer258031,65120k+Non-prefixed global variable
#3Shortcodes Ultimate – Content Elements246561,552400k+Non-prefixed global variable
#4Advanced iFrame248871,12040k+Non-prefixed global variable
#5Five-Star Ratings Shortcode236041,317600Non-prefixed global variable
#6YITH WooCommerce Product Slider Carousel303891,4794k+Non-prefixed global variable
#7Coupon Creator256984121k+Output is not escaped
#8Webcomic25593308600Output is not escaped
#9Uix Shortcodes33246444400Non-prefixed global variable
#10oik224891802k+Non Singular String Literal Domain
#11Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code3152513110k+Text Domain Mismatch
#12MW WP Form27334219200k+Output is not escaped
#13Snippet Shortcodes363801494k+Non Singular String Literal Domain
#14Responsive Pricing Table3830910510k+Non Singular String Literal Domain
#15WP GoToWebinar28207207700Non-prefixed function
#16xili-tidy-tags352241571k+Output is not escaped
#17Themify Store Locator31237125500Text Domain Mismatch
#18QR code MeCard/vCard generator40322212k+Unsafe printing function
#19WP Coder – Insert & Manage Code Snippets365328010k+Nonce verification recommended
#20EZ SQL Reports Shortcode Widget and DB Backup27165158500Output is not escaped
#21Ultimate Post List35186842k+Missing Arg Domain
#22Post Content Shortcodes35205562k+Output is not escaped
#23sCode (Easy Shortcodes)3515797400Text Domain Mismatch
#24Yada Wiki37207452k+Text Domain Mismatch
#25Kaya QR Code Generator351934010k+Non Singular String Literal Domain
#26The Events Calendar Shortcode & Block367012710k+Non-prefixed hook name
#27W4 Post List36491333k+Non-prefixed global variable
#28Enhanced AJAX Add to Cart for WooCommerce469078600Missing Arg Domain
#29Donations via PayPal401431720k+Output is not escaped
#30Blog-in-Blog346493800Non-prefixed function
#31Better Recent Comments35127292k+Text Domain Mismatch
#32TechGasp Music Master411434500Output is not escaped
#33CC BMI Calculator401357800Output is not escaped
#34resmio button & widget379936400Text Domain Mismatch
#35Meks Flexible Shortcodes41133110k+Unsafe printing function
#36Easy Panorama3512010500Non Singular String Literal Domain
#37Decent Comments3893282k+Output is not escaped
#38Do Shortcodes for Rank Math SEO4711731k+Output is not escaped
#39WP Date and Time Shortcode40901210k+Output is not escaped
#40Shortcoder — Create Shortcodes for Anything382570100k+Non-prefixed global variable
#41Checklist416225400Text Domain Mismatch
#42Links shortcode407313900Unsafe printing function
#43Get Custom Field Values3740441k+Output is not escaped
#44Simple YouTube Responsive357583k+wp function not compatible with requires wp
#45Insert Pages55523040k+Output is not escaped
#46AffiliateWP – Leaderboard4968131k+Output is not escaped
#47Master QR Code Generator – Fast & Easy QR Code Creator772159400Non-prefixed global variable
#48Etsy Shop4258213k+Unsafe printing function
#49Responsive Tabs915994k+Non Singular String Literal Domain
#50List Last Changes5850151k+Output is not escaped