Shortcode WordPress Plugins That Need Review

148 indexed plugins

Plugins

148

Active Installs

1m+

Average Score

68

Audited

148

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1oik224891802k+Non Singular String Literal Domain
#2Five-Star Ratings Shortcode236041,317600Non-prefixed global variable
#3Advanced iFrame248871,12040k+Non-prefixed global variable
#4Shortcodes Ultimate – Content Elements246561,552400k+Non-prefixed global variable
#5Coupon Creator256984121k+Output is not escaped
#6Post Snippets – Custom WordPress Code Snippets Customizer258081,65420k+Non-prefixed global variable
#7Webcomic25593308600Output is not escaped
#8WP Spell Check2564,3902k+Direct Query
#9EZ SQL Reports Shortcode Widget and DB Backup27165158500Output is not escaped
#10MW WP Form27334219200k+Output is not escaped
#11WP GoToWebinar28207207700Non-prefixed function
#12YITH WooCommerce Product Slider Carousel303891,4794k+Non-prefixed global variable
#13Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code3152513110k+Text Domain Mismatch
#14Themify Store Locator31244125500Text Domain Mismatch
#15Uix Shortcodes33246444400Non-prefixed global variable
#16Blog-in-Blog346493800Non-prefixed function
#17BASE Item List35413800error log error log
#18Better Recent Comments35127292k+Text Domain Mismatch
#19Child Pages Shortcode35565k+Non-prefixed hook name
#20Easy Panorama3512010500Non Singular String Literal Domain
#21Extra Shortcodes353531k+date date
#22Kaya QR Code Generator351934020k+Non Singular String Literal Domain
#23Post Content Shortcodes35205562k+Output is not escaped
#24sCode (Easy Shortcodes)3515797400Text Domain Mismatch
#25Simple Map3510110k+Output is not escaped
#26Simple YouTube Responsive357583k+wp function not compatible with requires wp
#27Super Cool Ad Inserter Plugin35225600Text Domain Mismatch
#28Themify Shortcodes3536167k+Output is not escaped
#29Ultimate Post List35186842k+Missing Arg Domain
#30W4 Post List35501383k+Non-prefixed global variable
#31Product Attributes Shortcode3534700Nonce verification recommended
#32xili-tidy-tags352241571k+Output is not escaped
#33The Events Calendar Shortcode & Block367012710k+Non-prefixed hook name
#34WP Coder – Insert & Manage Code Snippets365328010k+Nonce verification recommended
#35Get Custom Field Values3740441k+Output is not escaped
#36resmio button & widget379936400Text Domain Mismatch
#37Snippet Shortcodes373591334k+Non Singular String Literal Domain
#38Shortcoder — Create Shortcodes for Anything372570100k+Non-prefixed global variable
#39Yada Wiki37207452k+Text Domain Mismatch
#40Decent Comments3893282k+Output is not escaped
#41Responsive Pricing Table3830910510k+Non Singular String Literal Domain
#42CC BMI Calculator401357800Output is not escaped
#43Links shortcode407313900Unsafe printing function
#44Donations via PayPal401431720k+Output is not escaped
#45Post Tiles40465400Output is not escaped
#46Shortcodes Finder40221884k+Nonce verification recommended
#47WP Date and Time Shortcode40901210k+Output is not escaped
#48QR code MeCard/vCard generator40322212k+Unsafe printing function
#49Checklist416225400Text Domain Mismatch
#50Meks Flexible Shortcodes41133110k+Unsafe printing function