Top Vulnerability WordPress Plugins
12 indexed plugins
Plugins
12
Active Installs
134k+
Average Score
54
Audited
12
Top Scores
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Compromise Scanner for wp2shell | 100 | 3 | 1k+ | trademarked term | |||
| #2 | AntiVirus | 99 | 2 | 1 | 30k+ | Missing direct file access protection | ||
| #3 | Prevent XSS Vulnerability | 98 | 10 | 1 | 6k+ | Missing Arg Domain | ||
| #4 | WPVulnerability | 96 | 4 | 10k+ | trademarked term | |||
| #5 | Security Ninja For MainWP | 47 | 246 | 71 | 500 | Text Domain Mismatch | ||
| #6 | Lockdown WP Admin | 41 | 20 | 50 | 10k+ | Request data is not unslashed | ||
| #7 | DefendWP Firewall | 39 | 16 | 203 | 3k+ | Non-prefixed global variable | ||
| #8 | WPDoctor Malware Scanner & Vulnerability Checker & IP blocker with Hack monitor Lite | 31 | 133 | 438 | 600 | Non-prefixed global variable | ||
| #9 | Security Ninja – WordPress Security & Firewall | 29 | 149 | 347 | 7k+ | Direct Query | ||
| #10 | Patchstack – WordPress & Plugins Security | 24 | 104 | 478 | 50k+ | Missing nonce verification | ||
| #11 | IP Geo Block | 23 | 399 | 589 | 8k+ | Output is not escaped | ||
| #12 | WPScan – WordPress Security Scanner | 21 | 527 | 265 | 8k+ | Text Domain Mismatch |
