Top Users WordPress Plugins
50 indexed plugins
Plugins
50
Active Installs
635k+
Average Score
57
Audited
50
Top Scores
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Simple Login Log | 100 | 0 | 5k+ | No open findings | |||
| #2 | Restrict Media Library Access | 98 | 3 | 1 | 2k+ | license mismatch | ||
| #3 | Users Registration Date | 98 | 3 | 0 | 2k+ | Missing direct file access protection | ||
| #4 | Prevent Concurrent Logins | 97 | 2 | 10 | 900 | Non-prefixed function | ||
| #5 | User Access Shortcodes | 92 | 3 | 1 | 1k+ | Missing direct file access protection | ||
| #6 | Simple Membership Form Shortcode | 91 | 7 | 1 | 2k+ | Missing direct file access protection | ||
| #7 | User Profile Picture | 90 | 50 | 40k+ | Non-prefixed hook name | |||
| #8 | Password Strength Settings for WooCommerce | 89 | 17 | 6 | 10k+ | Missing Arg Domain | ||
| #9 | Resend Welcome Email | 78 | 5 | 9 | 1k+ | Nonce verification recommended | ||
| #10 | Index WP Users For Speed | 77 | 10 | 35 | 1k+ | Non-prefixed global variable | ||
| #11 | Force Password Change | 73 | 4 | 10 | 400 | Missing nonce verification | ||
| #12 | Simple Local Avatars | 72 | 14 | 16 | 100k+ | Non-prefixed constant | ||
| #13 | BuddyPress Default Data | 71 | 8 | 21 | 400 | Interpolated SQL is not prepared | ||
| #14 | Export Users With Meta | 70 | 13 | 13 | 2k+ | Direct Query | ||
| #15 | Support Me | 70 | 12 | 6 | 900 | Unsafe printing function | ||
| #16 | Disable Users | 69 | 11 | 9 | 2k+ | Text Domain Mismatch | ||
| #17 | Email as Username for WP-Members | 69 | 15 | 8 | 700 | Text Domain Mismatch | ||
| #18 | Simple Membership Custom Messages | 67 | 47 | 0 | 7k+ | Text Domain Mismatch | ||
| #19 | User Profile Picture | 66 | 9 | 8 | 4k+ | Missing nonce verification | ||
| #20 | User Switching | 63 | 2 | 47 | 200k+ | Nonce verification recommended | ||
| #21 | Products Restricted Users for WooCommerce | 61 | 31 | 24 | 400 | wp function not compatible with requires wp | ||
| #22 | Co-Authors Plus | 59 | 2 | 76 | 20k+ | Input is not sanitized | ||
| #23 | Basic User Avatars | 58 | 17 | 7 | 20k+ | Output is not escaped | ||
| #24 | View Admin As | 58 | 307 | 135 | 9k+ | Non Singular String Literal Domain | ||
| #25 | Admin Bar User Switching | 55 | 16 | 31 | 2k+ | Input is not validated | ||
| #26 | Starbox – the Author Box for Humans | 52 | 144 | 19 | 10k+ | Non Singular String Literal Domain | ||
| #27 | Post Notification by Email | 52 | 36 | 13 | 1k+ | Output is not escaped | ||
| #28 | Simple User Listing | 50 | 27 | 56 | 900 | Non-prefixed global variable | ||
| #29 | Users by Date Registered | 49 | 13 | 20 | 1k+ | Nonce verification recommended | ||
| #30 | Import Users from CSV | 47 | 33 | 12 | 10k+ | Unsafe printing function | ||
| #31 | User Session Control | 43 | 31 | 21 | 700 | Output is not escaped | ||
| #32 | Disable User Login | 42 | 25 | 19 | 5k+ | Unsafe printing function | ||
| #33 | Manage User Columns | 42 | 15 | 27 | 1k+ | Request data is not unslashed | ||
| #34 | Posts 2 Posts | 41 | 42 | 73 | 10k+ | Non Singular String Literal Domain | ||
| #35 | Avatar Manager | 41 | 29 | 41 | 5k+ | Unsafe printing function | ||
| #36 | Smart User Slug Hider | 41 | 85 | 12 | 3k+ | Output is not escaped | ||
| #37 | JSM Show User Metadata | 40 | 14 | 64 | 3k+ | Nonce verification recommended | ||
| #38 | Fast User Switching | 40 | 28 | 28 | 2k+ | Output is not escaped | ||
| #39 | Simple Membership WP user Import | 39 | 22 | 46 | 4k+ | Request data is not unslashed | ||
| #40 | Better User Search | 39 | 24 | 44 | 700 | SQL query is not prepared | ||
| #41 | Export User Data | 38 | 187 | 62 | 6k+ | Text Domain Mismatch | ||
| #42 | BP Profile Search | 36 | 321 | 85 | 5k+ | Output is not escaped | ||
| #43 | Change Username | 35 | 7 | 10 | 4k+ | Direct Query | ||
| #44 | User Photo | 35 | 112 | 68 | 3k+ | Output is not escaped | ||
| #45 | Expire User Passwords | 35 | 3 | 15 | 3k+ | Nonce verification recommended | ||
| #46 | One User Avatar | User Profile Picture | 34 | 68 | 190 | 100k+ | Non-prefixed global variable | ||
| #47 | User Spam Remover | 31 | 115 | 14 | 1k+ | Output is not escaped | ||
| #48 | HM Multiple Roles | 27 | 537 | 1,287 | 1k+ | Non-prefixed global variable | ||
| #49 | Bulk Edit and Create User Profiles – WP Sheet Editor | 25 | 995 | 1,001 | 1k+ | Text Domain Mismatch | ||
| #50 | New User Approve | 24 | 652 | 1,415 | 20k+ | Non-prefixed global variable |
