PluginScore

Spam WordPress Plugins with Most Issues

70 indexed plugins

Plugins

70

Active Installs

7m+

Average Score

56

Audited

69

Most Issues

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Message Filter for Contact Form 7241,0441,5941k+Non-prefixed global variable
#2Spam protection, Honeypot, Anti-Spam by CleanTalk248171,125200k+Missing nonce verification
#3Maspik – Ultimate Spam Protection2821286230k+Missing nonce verification
#4WPBruiser {no- Captcha anti-Spam}2564625910k+Non Singular String Literal Domain
#5FV Antispam26332239900Output is not escaped
#6CM E-Mail Blacklist – Simple email filtering for safer registration35269205700Output is not escaped
#7Zero Spam for WordPress347939320k+Non-prefixed global variable
#8Throws SPAM Away3432712310k+Missing Arg Domain
#9WP Mail Logging3476258300k+Nonce verification recommended
#10IntenseDebate Comments35203114500Output is not escaped
#11Friendly Captcha for WordPress351926210k+Output is not escaped
#12Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms4522524k+Direct Query
#13Simple CAPTCHA with Cloudflare Turnstile3575147200k+Output is not escaped
#14Stop Spammers Classic94185130k+wp function not compatible with requires wp
#15Uber reCaptcha43129451k+Text Domain Mismatch
#16Exploit Scanner37251308k+Non-prefixed global variable
#17Comment Experience by Progress Planner351358500Text Domain Mismatch
#18hCaptcha for WP421151970k+Exception output is not escaped
#19Akismet Anti-spam: Spam Protection3533995m+Non-prefixed global variable
#20User Spam Remover31115141k+Output is not escaped
#21VigilanTor366657400Setting is missing a sanitization callback
#22Email Address Encoder411098100k+wp function not compatible with requires wp
#23reCAPTCHA for WooCommerce42803140k+Output is not escaped
#24Spam Destroyer3763435k+rand rand
#25Analytics Spam Blocker377622800Unsafe printing function
#26WP Spam Question Filter3563301k+Output is not escaped
#27Smart Attachment Page Remove44823900Output is not escaped
#28Pixeline's Email Protector35804800Text Domain Mismatch
#29Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR)39284580k+Missing nonce verification
#30Sucuri Security – Auditing, Malware Scanner and Security Hardening825111600k+Missing direct file access protection
#31Comment Blacklist Updater4245151k+Output is not escaped
#32Antispam411141400Missing nonce verification
#33Cookies for Comments39222920k+Input is not validated
#34Rut Chileno con Validación para WooCommerce4335161k+Text Domain Mismatch
#35Anti-Captcha (anti-spam botblocker)5623261k+rand mt rand
#36Block Comment Spam Bots353117800Output is not escaped
#37Kama SpamBlock4137115k+Heredoc Output Not Escaped
#38ReCaptcha v2 for Contact Form 7441230200k+Nonce verification recommended
#39Simple Login Captcha70201910k+date date
#40Anti-spam Reloaded4319191k+Output is not escaped
#41Batch Comment Spam Deletion4622151k+Nonce verification recommended
#42Constructor for SiteOrigin61296600Output is not escaped
#43User Last Login65275600Output is not escaped
#44Add Google re captcha in WordPress Forms591616500Output is not escaped
#45Bulk Comments Management75625600Direct Query
#46Hizzle CAPTCHA – Protect your forms from spam80427500Non-prefixed global variable
#47Image Captcha For Gravity Forms802010400Text Domain Mismatch
#48WP fail2ban Add-on for Contact Form 7851018800Non-prefixed constant
#49WP fail2ban Add-on for Gravity Forms851018600Non-prefixed constant
#50Delete Pending Comments57161110k+Unsafe printing function