PluginScore

Spam WordPress Plugins That Need Review

70 indexed plugins

Plugins

70

Active Installs

7m+

Average Score

56

Audited

69

Needs Review

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Message Filter for Contact Form 7241,0441,5941k+Non-prefixed global variable
#2Spam protection, Honeypot, Anti-Spam by CleanTalk248171,125200k+Missing nonce verification
#3WPBruiser {no- Captcha anti-Spam}2564625910k+Non Singular String Literal Domain
#4FV Antispam26332239900Output is not escaped
#5Maspik – Ultimate Spam Protection2821286230k+Missing nonce verification
#6User Spam Remover31115141k+Output is not escaped
#7Throws SPAM Away3432712310k+Missing Arg Domain
#8WP Mail Logging3476258300k+Nonce verification recommended
#9Zero Spam for WordPress347939320k+Non-prefixed global variable
#10Akismet Anti-spam: Spam Protection3533995m+Non-prefixed global variable
#11Block Comment Spam Bots353117800Output is not escaped
#12CM E-Mail Blacklist – Simple email filtering for safer registration35269205700Output is not escaped
#13Friendly Captcha for WordPress351926210k+Output is not escaped
#14Give – Cloudflare Turnstile3532600Hidden files included
#15IntenseDebate Comments35203114500Output is not escaped
#16Pixeline's Email Protector35804800Text Domain Mismatch
#17Simple CAPTCHA with Cloudflare Turnstile3575147200k+Output is not escaped
#18WP Spam Question Filter3563301k+Output is not escaped
#19Comment Experience by Progress Planner351358500Text Domain Mismatch
#20VigilanTor366657400Setting is missing a sanitization callback
#21Analytics Spam Blocker377622800Unsafe printing function
#22Exploit Scanner37251308k+Non-prefixed global variable
#23Spam Destroyer3763435k+rand rand
#24Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR)39284580k+Missing nonce verification
#25Cookies for Comments39222920k+Input is not validated
#26Antispam411141400Missing nonce verification
#27Email Address Encoder411098100k+wp function not compatible with requires wp
#28Kama SpamBlock4137115k+Heredoc Output Not Escaped
#29Comment Blacklist Updater4245151k+Output is not escaped
#30hCaptcha for WP421151970k+Exception output is not escaped
#31reCAPTCHA for WooCommerce42803140k+Output is not escaped
#32Anti-spam Reloaded4319191k+Output is not escaped
#33Rut Chileno con Validación para WooCommerce4335161k+Text Domain Mismatch
#34Uber reCaptcha43129451k+Text Domain Mismatch
#35Smart Attachment Page Remove44823900Output is not escaped
#36ReCaptcha v2 for Contact Form 7441230200k+Nonce verification recommended
#37Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms4522524k+Direct Query
#38Batch Comment Spam Deletion4622151k+Nonce verification recommended
#39Anti-Captcha (anti-spam botblocker)5623261k+rand mt rand
#40Delete Pending Comments57161110k+Unsafe printing function
#41Add Google re captcha in WordPress Forms591616500Output is not escaped
#42Constructor for SiteOrigin61296600Output is not escaped
#43Comment Blacklist Manager64148600Output is not escaped
#44User Last Login65275600Output is not escaped
#45Comment Form CSRF Protection70710500Request data is not unslashed
#46Simple Login Captcha70201910k+date date
#47Block Emails & Addresses for WooCommerce Checkout70412700error log set error handler
#48Formidable Honeypot74106400Text Domain Mismatch
#49Bulk Comments Management75625600Direct Query
#50En Spam75216500wp function not compatible with requires wp