Widget WordPress Plugins with Most Issues
245 indexed plugins
Plugins
245
Active Installs
3m+
Average Score
56
Audited
245
Most Issues
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Social Media Share Buttons & Social Sharing Icons | 25 | 2,433 | 1,383 | 100k+ | Unsafe printing function | ||
| #2 | Content Aware Sidebars – Fastest Widget Area Plugin | 23 | 993 | 1,738 | 30k+ | Non-prefixed global variable | ||
| #3 | SpiceBox | 24 | 828 | 1,816 | 20k+ | Non-prefixed global variable | ||
| #4 | Show Eventbrite Events – Event Feed for Eventbrite | 25 | 595 | 1,525 | 900 | Non-prefixed global variable | ||
| #5 | Kenta Companion | 23 | 657 | 1,419 | 2k+ | Non-prefixed global variable | ||
| #6 | Brands for WooCommerce | 24 | 773 | 693 | 6k+ | Text Domain Mismatch | ||
| #7 | Dynamic Widgets | 24 | 631 | 812 | 10k+ | Non-prefixed global variable | ||
| #8 | Avadanta Companion | 32 | 1,318 | 54 | 2k+ | Text Domain Mismatch | ||
| #9 | Blocksy Companion | 81 | 1,078 | 300k+ | Non-prefixed global variable | |||
| #10 | Themesflat Addons For Elementor | 28 | 714 | 227 | 40k+ | Output is not escaped | ||
| #11 | Webcomic | 25 | 593 | 308 | 600 | Output is not escaped | ||
| #12 | Query Wrangler | 28 | 628 | 229 | 700 | Output is not escaped | ||
| #13 | Ultimate Tag Cloud Widget | 37 | 715 | 16 | 4k+ | Output is not escaped | ||
| #14 | Ultimate Addons for SiteOrigin | 28 | 525 | 189 | 7k+ | Text Domain Mismatch | ||
| #15 | Mailjet Email Marketing | 24 | 435 | 206 | 10k+ | Unsafe printing function | ||
| #16 | WP Testimonials | 31 | 183 | 455 | 10k+ | Non-prefixed global variable | ||
| #17 | Plexx Elementor Extension | 37 | 582 | 14 | 400 | Text Domain Mismatch | ||
| #18 | Login Widget With Shortcode | 26 | 335 | 198 | 6k+ | wp function not compatible with requires wp | ||
| #19 | StagTools | 37 | 476 | 53 | 1k+ | Text Domain Mismatch | ||
| #20 | Star Addons for Elementor | 30 | 236 | 255 | 1k+ | Non-prefixed global variable | ||
| #21 | Rich Showcase for Google Reviews | 33 | 212 | 278 | 100k+ | Output is not escaped | ||
| #22 | WP GoToWebinar | 28 | 207 | 207 | 700 | Non-prefixed function | ||
| #23 | Ultimate Posts Widget | 31 | 309 | 86 | 10k+ | Output is not escaped | ||
| #24 | wp-forecast | 75 | 263 | 117 | 4k+ | Missing Arg Domain | ||
| #25 | WP Popular Posts | 29 | 77 | 300 | 100k+ | Non-prefixed global variable | ||
| #26 | ICIT Weather Widget | 35 | 358 | 8 | 400 | Output is not escaped | ||
| #27 | HT Menu – WordPress Mega Menu Builder for Elementor | 37 | 302 | 58 | 3k+ | Text Domain Mismatch | ||
| #28 | Custom Menu Wizard Widget | 38 | 326 | 30 | 2k+ | Output is not escaped | ||
| #29 | Widgets for Booking.com Reviews | 95 | 352 | 8k+ | Non-prefixed global variable | |||
| #30 | Widgets for Yelp Reviews | 96 | 349 | 2k+ | Non-prefixed global variable | |||
| #31 | Widgets for Google Reviews | 95 | 344 | 900k+ | Non-prefixed global variable | |||
| #32 | QR code MeCard/vCard generator | 40 | 322 | 21 | 2k+ | Unsafe printing function | ||
| #33 | Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager | 34 | 32 | 307 | 100k+ | Non-prefixed global variable | ||
| #34 | Dashboard Widgets Suite | 36 | 206 | 124 | 4k+ | Output is not escaped | ||
| #35 | IntenseDebate Comments | 35 | 203 | 114 | 500 | Output is not escaped | ||
| #36 | Marquee image crawler | 35 | 168 | 136 | 600 | Non-prefixed global variable | ||
| #37 | Search Meter | 34 | 191 | 94 | 20k+ | Output is not escaped | ||
| #38 | Featured Post with thumbnail | 24 | 158 | 122 | 400 | Output is not escaped | ||
| #39 | ACF Recent Posts Widget | 39 | 260 | 16 | 500 | Output is not escaped | ||
| #40 | Wpazure Kit | 44 | 136 | 140 | 800 | Missing direct file access protection | ||
| #41 | Ultimate Post List | 35 | 186 | 84 | 2k+ | Missing Arg Domain | ||
| #42 | ThemeZee Widget Bundle | 42 | 211 | 58 | 5k+ | Output is not escaped | ||
| #43 | Recent Posts Widget With Thumbnails | 37 | 222 | 46 | 100k+ | Output is not escaped | ||
| #44 | WP Notes Widget | 34 | 217 | 36 | 700 | Output is not escaped | ||
| #45 | Configurable Tag Cloud (CTC) | 39 | 126 | 121 | 2k+ | Output is not escaped | ||
| #46 | Widget Responsive for Youtube | 37 | 240 | 7 | 7k+ | Output is not escaped | ||
| #47 | Spots | 35 | 195 | 49 | 800 | Output is not escaped | ||
| #48 | Kaya QR Code Generator | 35 | 193 | 40 | 10k+ | Non Singular String Literal Domain | ||
| #49 | BP Group Documents | 36 | 27 | 195 | 600 | Non-prefixed global variable | ||
| #50 | Blimply | 37 | 172 | 43 | 800 | Text Domain Mismatch |