PluginScore

Spam WordPress Plugins with Most Issues

69 indexed plugins

Plugins

69

Active Installs

7m+

Average Score

56

Audited

68

Most Issues

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Message Filter for Contact Form 7241,0441,5941k+Non-prefixed global variable
#2CleanTalk Anti-Spam. Spam Firewall & Bot protection248181,092200k+Missing nonce verification
#3Maspik – Ultimate Spam Protection2821286230k+Missing nonce verification
#4WPBruiser {no- Captcha anti-Spam}2564625910k+Non Singular String Literal Domain
#5FV Antispam26332239900Output is not escaped
#6Anti Spam and list cleaner – AcyChecker2446288400Output is not escaped
#7CM E-Mail Blacklist – Simple email filtering for safer registration35269205800Output is not escaped
#8Zero Spam for WordPress347939320k+Non-prefixed global variable
#9Throws SPAM Away3432712310k+Missing Arg Domain
#10WP Mail Logging3476258300k+Nonce verification recommended
#11IntenseDebate Comments35203114500Output is not escaped
#12Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms402724k+Direct Query
#13Friendly Captcha for WordPress35192629k+Output is not escaped
#14Simple CAPTCHA with Cloudflare Turnstile3582148100k+Output is not escaped
#15Stop Spammers Classic94185130k+wp function not compatible with requires wp
#16Uber reCaptcha43129451k+Text Domain Mismatch
#17Exploit Scanner37251308k+Non-prefixed global variable
#18Comment Experience by Progress Planner351358500Text Domain Mismatch
#19hCaptcha for WP421151870k+Exception output is not escaped
#20Akismet Anti-spam: Spam Protection3533995m+Non-prefixed global variable
#21User Spam Remover31115141k+Output is not escaped
#22Email Address Encoder411098100k+wp function not compatible with requires wp
#23reCAPTCHA for WooCommerce42803140k+Output is not escaped
#24Spam Destroyer3763436k+rand rand
#25Analytics Spam Blocker377622800Unsafe printing function
#26WP Spam Question Filter3563302k+Output is not escaped
#27Smart Attachment Page Remove44823900Output is not escaped
#28Pixeline's Email Protector35775800Unsafe printing function
#29Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR)39284580k+Missing nonce verification
#30Sucuri Security – Auditing, Malware Scanner and Security Hardening825111600k+Missing direct file access protection
#31Comment Blacklist Updater4245151k+Output is not escaped
#32Antispam411141400Missing nonce verification
#33Cookies for Comments39222920k+Input is not validated
#34Rut Chileno con Validación para WooCommerce4335161k+Text Domain Mismatch
#35Anti-Captcha (anti-spam botblocker)5623261k+rand mt rand
#36Block Comment Spam Bots353117800Output is not escaped
#37ReCaptcha v2 for Contact Form 7441230200k+Nonce verification recommended
#38Simple Login Captcha70201910k+date date
#39Anti-spam Reloaded4319192k+Output is not escaped
#40Batch Comment Spam Deletion4622151k+Nonce verification recommended
#41Kama SpamBlock642975k+Short PHP open tag found
#42Constructor for SiteOrigin61296600Output is not escaped
#43User Last Login65275600Output is not escaped
#44Add Google re captcha in WordPress Forms591616500Output is not escaped
#45Bulk Comments Management75625700Direct Query
#46Hizzle CAPTCHA – Protect your forms from spam80427500Non-prefixed global variable
#47Image Captcha For Gravity Forms802010400Text Domain Mismatch
#48WP fail2ban Add-on for Contact Form 7851018800Non-prefixed constant
#49WP fail2ban Add-on for Gravity Forms851018600Non-prefixed constant
#50Delete Pending Comments57161110k+Unsafe printing function