Most Installed Widget WordPress Plugins
245 indexed plugins
Plugins
245
Active Installs
3m+
Average Score
56
Audited
245
Most Installed
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #201 | Ceylon Extra | 77 | 89 | 41 | 500 | Text Domain Mismatch | ||
| #202 | Friends Link Widget | 49 | 86 | 1 | 500 | Output is not escaped | ||
| #203 | IFrame Widget | 40 | 87 | 1 | 500 | Output is not escaped | ||
| #204 | IntenseDebate Comments | 35 | 203 | 114 | 500 | Output is not escaped | ||
| #205 | Juiz Last Tweet Widget | 32 | 136 | 53 | 500 | Output is not escaped | ||
| #206 | PE Panels | 43 | 181 | 4 | 500 | Output is not escaped | ||
| #207 | Pinterest Pinboard Widget | 46 | 54 | 4 | 500 | Output is not escaped | ||
| #208 | Recent Posts Widget Plus | 42 | 68 | 3 | 500 | Output is not escaped | ||
| #209 | Reusable Gutenberg Blocks Widget | 68 | 24 | 9 | 500 | Output is not escaped | ||
| #210 | Review widget addon for Divi | 87 | 20 | 3 | 500 | Text Domain Mismatch | ||
| #211 | Simple Ticker | 99 | 1 | 7 | 500 | Non-prefixed global variable | ||
| #212 | Masonry Widget | 41 | 58 | 11 | 500 | Output is not escaped | ||
| #213 | Songkick Concerts and Festivals | 49 | 9 | 48 | 500 | Input is not sanitized | ||
| #214 | TechGasp Music Master | 41 | 143 | 4 | 500 | Output is not escaped | ||
| #215 | Twiget Twitter Widget | 38 | 147 | 36 | 500 | Output is not escaped | ||
| #216 | TZ Flickr Widget | 40 | 67 | 7 | 500 | Output is not escaped | ||
| #217 | Widget Builder | 40 | 40 | 52 | 500 | Non-prefixed global variable | ||
| #218 | Widget Instance | 94 | 7 | 11 | 500 | Non-prefixed global variable | ||
| #219 | Add Dashboard Columns | 99 | 1 | 0 | 400 | outdated tested upto header | ||
| #220 | Advanced Custom Fields: Widget Area Field | 74 | 29 | 4 | 400 | Text Domain Mismatch | ||
| #221 | Wbcom Designs – Birthday Widget for BuddyPress | 84 | 163 | 13 | 400 | Text Domain Mismatch | ||
| #222 | Content Widget | 41 | 72 | 9 | 400 | Output is not escaped | ||
| #223 | Customize Private & Protected – Change or remove title prefix and more | 87 | 14 | 5 | 400 | Non Singular String Literal Text | ||
| #224 | Dashboard Widget Sidebar | 62 | 9 | 16 | 400 | Input is not validated | ||
| #225 | Display your Checkatrade | 72 | 19 | 3 | 400 | Output is not escaped | ||
| #226 | Easy Profile Widget | 37 | 157 | 20 | 400 | Output is not escaped | ||
| #227 | Easy Widget Columns | 97 | 3 | 17 | 400 | Non-prefixed global variable | ||
| #228 | Featured Post with thumbnail | 24 | 158 | 122 | 400 | Output is not escaped | ||
| #229 | Gallery Widget | 39 | 122 | 11 | 400 | Output is not escaped | ||
| #230 | ICIT Weather Widget | 35 | 358 | 8 | 400 | Output is not escaped | ||
| #231 | jQuery Vertical Scroller | 41 | 110 | 4 | 400 | Output is not escaped | ||
| #232 | List MixCloud | 99 | 3 | 400 | Non-prefixed class | |||
| #233 | Page List Widget | 39 | 150 | 6 | 400 | Output is not escaped | ||
| #234 | Plexx Elementor Extension | 37 | 582 | 14 | 400 | Text Domain Mismatch | ||
| #235 | Query Multiple Taxonomies | 39 | 55 | 41 | 400 | Output is not escaped | ||
| #236 | Quick Flickr Widget | 56 | 37 | 2 | 400 | Output is not escaped | ||
| #237 | resmio button & widget | 37 | 99 | 36 | 400 | Text Domain Mismatch | ||
| #238 | Responsive Image Widget | 49 | 43 | 0 | 400 | Output is not escaped | ||
| #239 | Contact Information Widget | 51 | 69 | 5 | 400 | Output is not escaped | ||
| #240 | SM Vertical Menu | 55 | 45 | 1 | 400 | Output is not escaped | ||
| #241 | Tock Widget | 78 | 6 | 9 | 400 | Missing direct file access protection | ||
| #242 | Tumblr Widget | 40 | 106 | 1 | 400 | Output is not escaped | ||
| #243 | Tuxedo Responsive Widget Columns | 78 | 19 | 3 | 400 | Output is not escaped | ||
| #244 | Widgets for Social Post Feed | 91 | 1 | 146 | 400 | Non-prefixed global variable | ||
| #245 | YouTube widget | 38 | 39 | 25 | 400 | Output is not escaped |