Recently Scanned Spam WordPress Plugins

70 indexed plugins

Plugins

70

Active Installs

7m+

Average Score

56

Audited

69

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms4522524k+Direct Query
#2hCaptcha for WP421151970k+Exception output is not escaped
#3Gravity Forms Zero Spam9459100k+trademarked term
#4Pixeline's Email Protector35804800Text Domain Mismatch
#5Spam protection, Honeypot, Anti-Spam by CleanTalk248171,125200k+Missing nonce verification
#6Maspik – Ultimate Spam Protection2821286230k+Missing nonce verification
#7Simple CAPTCHA with Cloudflare Turnstile3575147200k+Output is not escaped
#8Anti Spam and list cleaner – AcyChecker9043400Exception output is not escaped
#9Kama SpamBlock4137114k+Heredoc Output Not Escaped
#10VigilanTor366657400Setting is missing a sanitization callback
#11Message Filter for Contact Form 7241,0441,5941k+Non-prefixed global variable
#12Block Emails & Addresses for WooCommerce Checkout70412700error log set error handler
#13Sucuri Security – Auditing, Malware Scanner and Security Hardening825111600k+Missing direct file access protection
#14Stop Spammers Classic94185130k+wp function not compatible with requires wp
#15Image Captcha For Gravity Forms802010400Text Domain Mismatch
#16Formidable Honeypot74106400Text Domain Mismatch
#17Antispam411141400Missing nonce verification
#18Comment Form CSRF Protection70710500Request data is not unslashed
#19IntenseDebate Comments35203114500Output is not escaped
#20Simple Honeypot for Contact Form 79116500Missing nonce verification
#21En Spam75216500wp function not compatible with requires wp
#22Comment Experience by Progress Planner351358500Text Domain Mismatch
#23Hizzle CAPTCHA – Protect your forms from spam80427500Non-prefixed global variable
#24Give – Cloudflare Turnstile3532600Hidden files included
#25Add Google re captcha in WordPress Forms591616500Output is not escaped
#26Anti-Spambot9732500Missing direct file access protection
#27Comment Blacklist Manager64148600Output is not escaped
#28User Last Login65275600Output is not escaped
#29WP fail2ban Add-on for Gravity Forms851018600Non-prefixed constant
#30Constructor for SiteOrigin61296600Output is not escaped
#31LH Multipart Email9145600Non-prefixed hook name
#32Bulk Comments Management75625600Direct Query
#33Honeypot Plus for Contact Form 777317800Missing nonce verification
#34CM E-Mail Blacklist – Simple email filtering for safer registration35269205700Output is not escaped
#35WP fail2ban Add-on for Contact Form 7851018800Non-prefixed constant
#36Analytics Spam Blocker377622800Unsafe printing function
#37Block Comment Spam Bots353117800Output is not escaped
#38Smart Attachment Page Remove44823900Output is not escaped
#39FV Antispam26332239900Output is not escaped
#40Batch Comment Spam Deletion4622151k+Nonce verification recommended
#41Comment Blacklist Updater4245151k+Output is not escaped
#42Rut Chileno con Validación para WooCommerce4335161k+Text Domain Mismatch
#43Anti-Captcha (anti-spam botblocker)5623261k+rand mt rand
#44Honeypot Anti Spam for Forminator Forms75471k+Missing nonce verification
#45Friendly Captcha for WordPress351926210k+Output is not escaped
#46Uber reCaptcha43129451k+Text Domain Mismatch
#47User Spam Remover31115141k+Output is not escaped
#48Block Specific Spam Woo Orders99141k+Non-prefixed hook name
#49Dam Spam10012k+unexpected markdown file
#50Anti-spam Reloaded4319191k+Output is not escaped