Top Shortcode WordPress Plugins
152 indexed plugins
Plugins
152
Active Installs
2m+
Average Score
70
Audited
152
Top Scores
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | Bloginfo Shortcode | 97 | 4 | 1 | 700 | Missing direct file access protection | ||
| #52 | Bloginfo Shortcode | 97 | 5 | 0 | 700 | Missing direct file access protection | ||
| #53 | Team Members | 96 | 15 | 16 | 20k+ | Missing direct file access protection | ||
| #54 | Progress Bar | 96 | 52 | 1 | 1k+ | Text Domain Mismatch | ||
| #55 | Relative URL ShortCode | 96 | 4 | 2 | 600 | outdated tested upto header | ||
| #56 | Amelia Calendar Essential Shortcodes | 96 | 2 | 9 | 500 | Not In Footer | ||
| #57 | Tag Cloud Shortcode | 96 | 5 | 1 | 500 | Missing direct file access protection | ||
| #58 | Posts in Page | 95 | 10 | 12 | 10k+ | date date | ||
| #59 | Spreaker Shortcode | 95 | 23 | 3 | 4k+ | Text Domain Mismatch | ||
| #60 | Podbean Shortcode | 94 | 22 | 2 | 900 | wp function not compatible with requires wp | ||
| #61 | Shortcode | 94 | 6 | 45 | 500 | Direct Query | ||
| #62 | Display Posts – Easy lists, grids, navigation, and more | 92 | 11 | 23 | 80k+ | Non-prefixed function | ||
| #63 | Events Shortcodes For The Events Calendar | 92 | 9 | 10k+ | Non-prefixed constant | |||
| #64 | Contact Form 7 Shortcode Enabler | 92 | 4 | 3 | 10k+ | trademarked term | ||
| #65 | Grid Shortcodes | 92 | 3 | 2 | 2k+ | Missing Version | ||
| #66 | Blocks – Reusable Content, Shortcodes & Site Variables | 92 | 1 | 4 | 600 | Database parameter is not escaped | ||
| #67 | Confetti Fall Animation | 92 | 2 | 5 | 500 | Non-prefixed class | ||
| #68 | Surbma | Divi Project Shortcodes | 92 | 5 | 2 | 400 | Text Domain Mismatch | ||
| #69 | Responsive Tabs | 91 | 59 | 9 | 4k+ | Non Singular String Literal Domain | ||
| #70 | Animated Headline | 90 | 5 | 16 | 2k+ | Non-prefixed constant | ||
| #71 | Simple Divi Shortcode | 89 | 5 | 0 | 10k+ | Output is not escaped | ||
| #72 | WP Anywhere Widgets | 89 | 16 | 14 | 700 | wp function not compatible with requires wp | ||
| #73 | Simple Footnotes | 87 | 11 | 1 | 600 | wp function not compatible with requires wp | ||
| #74 | Alligator Menu Popup | 87 | 4 | 1 | 600 | Missing Arg Domain | ||
| #75 | GET Params | 83 | 3 | 8 | 1k+ | Nonce verification recommended | ||
| #76 | cookie-cat | 81 | 14 | 27 | 1k+ | Non-prefixed function | ||
| #77 | Checklist in Post | 81 | 14 | 7 | 400 | Missing Version | ||
| #78 | Content Blocks (Custom Post Widget) | 80 | 6 | 2 | 10k+ | Output is not escaped | ||
| #79 | Forget About Shortcode Buttons | 78 | 11 | 25 | 20k+ | Missing direct file access protection | ||
| #80 | Master QR Code Generator – Fast & Easy QR Code Creator | 77 | 21 | 59 | 400 | Non-prefixed global variable | ||
| #81 | Post UI Tabs | 76 | 55 | 4 | 400 | Non Singular String Literal Domain | ||
| #82 | Matterport Shortcode | 75 | 21 | 30 | 3k+ | Text Domain Mismatch | ||
| #83 | Accordion Shortcode | 75 | 17 | 0 | 400 | Output is not escaped | ||
| #84 | AADMY – Add Auto Date Month Year Into Posts | 73 | 30 | 32 | 400 | Non-prefixed function | ||
| #85 | Bootstrap Shortcodes | 71 | 21 | 11 | 4k+ | Missing direct file access protection | ||
| #86 | Shortcode for Current Date | 66 | 27 | 12 | 10k+ | Text Domain Mismatch | ||
| #87 | QR Code Composer – Automatic QR Code Generator | 65 | 33 | 2 | 3k+ | Output is not escaped | ||
| #88 | Tabby Responsive Tabs | 60 | 16 | 5 | 10k+ | Output is not escaped | ||
| #89 | WP Shortcode by MyThemeShop | 59 | 32 | 5 | 10k+ | Output is not escaped | ||
| #90 | List Last Changes | 58 | 50 | 15 | 1k+ | Output is not escaped | ||
| #91 | Insert Pages | 55 | 52 | 30 | 40k+ | Output is not escaped | ||
| #92 | Genesis Columns Advanced | 55 | 26 | 4 | 10k+ | Unsafe printing function | ||
| #93 | Column Shortcodes | 53 | 32 | 9 | 60k+ | Unsafe printing function | ||
| #94 | Section Widget | 50 | 24 | 35 | 500 | Nonce verification recommended | ||
| #95 | AffiliateWP – Leaderboard | 49 | 68 | 13 | 1k+ | Output is not escaped | ||
| #96 | Disable Author Pages | 48 | 23 | 5 | 6k+ | Unsafe printing function | ||
| #97 | Do Shortcodes for Rank Math SEO | 47 | 117 | 3 | 1k+ | Output is not escaped | ||
| #98 | Stars Rating | 46 | 13 | 34 | 1k+ | Missing nonce verification | ||
| #99 | Enhanced AJAX Add to Cart for WooCommerce | 46 | 90 | 78 | 600 | Missing Arg Domain | ||
| #100 | Reusable Blocks Extended | 42 | 38 | 15 | 20k+ | Output is not escaped |
