Shortcode WordPress Plugins That Need Review

152 indexed plugins

Plugins

152

Active Installs

1m+

Average Score

69

Audited

152

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1oik224891802k+Non Singular String Literal Domain
#2Coupon Creator236024241k+Output is not escaped
#3Five-Star Ratings Shortcode236041,317600Non-prefixed global variable
#4Advanced iFrame248871,12040k+Non-prefixed global variable
#5Shortcodes Ultimate – Content Elements246561,552400k+Non-prefixed global variable
#6Post Snippets – Custom WordPress Code Snippets Customizer258031,65120k+Non-prefixed global variable
#7Webcomic25593308600Output is not escaped
#8WP Spell Check2594,3692k+Direct Query
#9EZ SQL Reports Shortcode Widget and DB Backup27165158500Output is not escaped
#10MW WP Form27334219200k+Output is not escaped
#11WP GoToWebinar28207207700Non-prefixed function
#12YITH WooCommerce Product Slider Carousel303891,4794k+Non-prefixed global variable
#13Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code3152513110k+Text Domain Mismatch
#14Themify Store Locator31237125500Text Domain Mismatch
#15Uix Shortcodes33246444400Non-prefixed global variable
#16Blog-in-Blog346493800Non-prefixed function
#17BASE Item List35413700error log error log
#18Better Recent Comments35127292k+Text Domain Mismatch
#19Child Pages Shortcode35565k+Non-prefixed hook name
#20Easy Panorama3512010500Non Singular String Literal Domain
#21Extra Shortcodes353531k+date date
#22Kaya QR Code Generator351934010k+Non Singular String Literal Domain
#23Post Content Shortcodes35205562k+Output is not escaped
#24sCode (Easy Shortcodes)3515797400Text Domain Mismatch
#25Simple Map3510110k+Output is not escaped
#26Simple YouTube Responsive357583k+wp function not compatible with requires wp
#27Super Cool Ad Inserter Plugin35205600Text Domain Mismatch
#28Themify Shortcodes3536167k+Output is not escaped
#29Ultimate Post List35186842k+Missing Arg Domain
#30Product Attributes Shortcode3534700Nonce verification recommended
#31xili-tidy-tags352241571k+Output is not escaped
#32Snippet Shortcodes363801494k+Non Singular String Literal Domain
#33The Events Calendar Shortcode & Block367012710k+Non-prefixed hook name
#34W4 Post List36491333k+Non-prefixed global variable
#35WP Coder – Insert & Manage Code Snippets365328010k+Nonce verification recommended
#36Get Custom Field Values3740441k+Output is not escaped
#37resmio button & widget379936400Text Domain Mismatch
#38Yada Wiki37207452k+Text Domain Mismatch
#39Decent Comments3893282k+Output is not escaped
#40Responsive Pricing Table3830910510k+Non Singular String Literal Domain
#41Shortcoder — Create Shortcodes for Anything382570100k+Non-prefixed global variable
#42CC BMI Calculator401357800Output is not escaped
#43Links shortcode407313800Unsafe printing function
#44Donations via PayPal401431720k+Output is not escaped
#45Post Tiles40465400Output is not escaped
#46WP Date and Time Shortcode40901210k+Output is not escaped
#47QR code MeCard/vCard generator40322212k+Unsafe printing function
#48Checklist416225400Text Domain Mismatch
#49Meks Flexible Shortcodes41133110k+Unsafe printing function
#50Powie's WHOIS Domain Check413811500Unsafe printing function