Most Downloaded Widget WordPress Plugins
244 indexed plugins
Plugins
244
Active Installs
3m+
Average Score
56
Audited
244
Most Downloaded
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #101 | RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg | 99 | 7 | 8k+ | Non-prefixed global variable | |||
| #102 | JS Categories List Widget | 35 | 37 | 18 | 1k+ | Non Singular String Literal Domain | ||
| #103 | AH Display Widgets | 41 | 52 | 16 | 8k+ | Text Domain Mismatch | ||
| #104 | Linkable Title Html and Php Widget | 36 | 108 | 31 | 600 | Output is not escaped | ||
| #105 | Webcomic | 25 | 593 | 308 | 600 | Output is not escaped | ||
| #106 | Kenta Companion | 23 | 657 | 1,419 | 2k+ | Non-prefixed global variable | ||
| #107 | Featured Image | 99 | 2 | 0 | 1k+ | Missing direct file access protection | ||
| #108 | HT Menu – WordPress Mega Menu Builder for Elementor | 37 | 300 | 60 | 3k+ | Text Domain Mismatch | ||
| #109 | Better Recent Comments | 35 | 127 | 29 | 2k+ | Text Domain Mismatch | ||
| #110 | Widgets Reloaded | 53 | 62 | 20 | 1k+ | Output is not escaped | ||
| #111 | Ultimate Post List | 35 | 186 | 84 | 2k+ | Missing Arg Domain | ||
| #112 | Multiple Sidebars | 36 | 109 | 75 | 600 | Non Singular String Literal Domain | ||
| #113 | Colorful Categories | 41 | 20 | 20 | 2k+ | Output is not escaped | ||
| #114 | BP Group Documents | 36 | 27 | 195 | 600 | Non-prefixed global variable | ||
| #115 | Jellyfish Counter Widget | 41 | 174 | 5 | 1k+ | Output is not escaped | ||
| #116 | Remove Widget Titles | 97 | 5 | 0 | 7k+ | Missing direct file access protection | ||
| #117 | WP GoToWebinar | 28 | 207 | 207 | 700 | Non-prefixed function | ||
| #118 | Code Widget | 44 | 60 | 33 | 4k+ | Text Domain Mismatch | ||
| #119 | ICIT Weather Widget | 35 | 358 | 8 | 400 | Output is not escaped | ||
| #120 | Categorized Tag Cloud | 41 | 44 | 17 | 1k+ | Output is not escaped | ||
| #121 | Taxonomy Dropdown Widget | 97 | 6 | 2 | 2k+ | wp function not compatible with requires wp | ||
| #122 | IFrame Widget | 40 | 87 | 1 | 500 | Output is not escaped | ||
| #123 | Taxonomy List Widget | 96 | 6 | 3 | 1k+ | wp function not compatible with requires wp | ||
| #124 | YouTube widget | 38 | 39 | 25 | 400 | Output is not escaped | ||
| #125 | Quick Flickr Widget | 56 | 37 | 2 | 400 | Output is not escaped | ||
| #126 | Featured Post with thumbnail | 24 | 158 | 122 | 400 | Output is not escaped | ||
| #127 | Sitekit | 35 | 122 | 8 | 3k+ | Output is not escaped | ||
| #128 | Simple Link List Widget | 40 | 129 | 8 | 2k+ | Output is not escaped | ||
| #129 | Bloglovin Button | 52 | 33 | 1 | 800 | Output is not escaped | ||
| #130 | Compact Archives | 90 | 8 | 14 | 2k+ | Non-prefixed function | ||
| #131 | Image Widget | 44 | 48 | 5 | 3k+ | Output is not escaped | ||
| #132 | Twiget Twitter Widget | 38 | 147 | 36 | 500 | Output is not escaped | ||
| #133 | Mailchimp Widget by ProteusThemes | 66 | 17 | 9 | 1k+ | Output is not escaped | ||
| #134 | Query Multiple Taxonomies | 39 | 55 | 41 | 500 | Output is not escaped | ||
| #135 | Recent Posts Plus | 38 | 111 | 4 | 1k+ | Output is not escaped | ||
| #136 | Hot Random Image | 91 | 24 | 1 | 2k+ | Text Domain Mismatch | ||
| #137 | Contact Info Widget | 40 | 184 | 3 | 1k+ | Output is not escaped | ||
| #138 | BuddyPress Notification Widget | 39 | 54 | 31 | 600 | Output is not escaped | ||
| #139 | QR code MeCard/vCard generator | 40 | 322 | 21 | 2k+ | Unsafe printing function | ||
| #140 | Query Wrangler | 28 | 628 | 229 | 700 | Output is not escaped | ||
| #141 | Crypto Converter ⚡ Widget | 100 | 0 | 1k+ | No open findings | |||
| #142 | Really Simple Gallery Widget | 39 | 114 | 90 | 700 | Non-prefixed global variable | ||
| #143 | Smaily for WP | 39 | 52 | 36 | 600 | Output is not escaped | ||
| #144 | Tabs Widget for Page Builder | 72 | 22 | 7 | 3k+ | Text Domain Mismatch | ||
| #145 | Widget Builder | 40 | 40 | 52 | 500 | Non-prefixed global variable | ||
| #146 | NS Category Widget | 88 | 1 | 17 | 1k+ | Missing nonce verification | ||
| #147 | Page in Widget | 64 | 26 | 0 | 1k+ | Output is not escaped | ||
| #148 | Upcoming Events Lists | 40 | 75 | 17 | 900 | Text Domain Mismatch | ||
| #149 | Standard Widget Extensions | 62 | 67 | 6 | 1k+ | Output is not escaped | ||
| #150 | Ceylon Extra | 77 | 89 | 41 | 500 | Text Domain Mismatch |
