Most Installed Widgets WordPress Plugins
132 indexed plugins
Plugins
132
Active Installs
4m+
Average Score
57
Audited
132
Most Installed
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #101 | JJ NextGen JQuery Slider | 39 | 221 | 7 | 800 | Output is not escaped | ||
| #102 | Wpazure Kit | 44 | 136 | 140 | 800 | Missing direct file access protection | ||
| #103 | Century ToolKit | 33 | 118 | 78 | 700 | Output is not escaped | ||
| #104 | Custom post type templates for Elementor | 38 | 289 | 33 | 700 | Text Domain Mismatch | ||
| #105 | HT Newsletter for Elementor | 86 | 53 | 3 | 700 | Text Domain Mismatch | ||
| #106 | LWS Affiliation | 86 | 8 | 23 | 700 | Missing nonce verification | ||
| #107 | Recent Posts with Excerpts | 39 | 138 | 2 | 700 | Output is not escaped | ||
| #108 | Widget Icon | 53 | 53 | 10 | 700 | Output is not escaped | ||
| #109 | Privilege Widget | 40 | 139 | 52 | 600 | Text Domain Mismatch | ||
| #110 | SnapWidget Social Photo Feed Widget | 82 | 9 | 9 | 600 | Output is not escaped | ||
| #111 | Widget Areas for LearnDash | 98 | 4 | 1 | 600 | Missing direct file access protection | ||
| #112 | Widget Menuizer | 40 | 44 | 26 | 600 | Missing Arg Domain | ||
| #113 | Buckets | 34 | 68 | 76 | 500 | Output is not escaped | ||
| #114 | Change Background Color for Pages, Posts, Widgets | 42 | 35 | 7 | 500 | Text Domain Mismatch | ||
| #115 | Elegant Blog Themes Demo Importer | 96 | 22 | 13 | 500 | Text Domain Mismatch | ||
| #116 | WP Team – WordPress Team Member Plugin | 38 | 537 | 36 | 500 | Text Domain Mismatch | ||
| #117 | Marin Companion | 87 | 19 | 66 | 500 | Non-prefixed global variable | ||
| #118 | NextGEN Gallery Sidebar Widget | 40 | 59 | 10 | 500 | Output is not escaped | ||
| #119 | Reusable Gutenberg Blocks Widget | 68 | 24 | 9 | 500 | Output is not escaped | ||
| #120 | Widget Instance | 94 | 7 | 11 | 500 | Non-prefixed global variable | ||
| #121 | WordPress Widgets Shortcode | 89 | 5 | 4 | 500 | trademarked term | ||
| #122 | Advanced Custom Fields: Widget Area Field | 74 | 29 | 4 | 400 | Text Domain Mismatch | ||
| #123 | Ammu Demo Import | 90 | 12 | 19 | 400 | Deprecated function: get_page_by_title | ||
| #124 | BWD Elementor Addons | 21 | 670 | 1,168 | 400 | Non-prefixed global variable | ||
| #125 | Ceylon Demo Installer | 81 | 11 | 9 | 400 | Non-prefixed function | ||
| #126 | Crafthemes Demo Import | 99 | 2 | 1 | 400 | Not In Footer | ||
| #127 | Dashboard Widget Sidebar | 62 | 9 | 16 | 400 | Input is not validated | ||
| #128 | Easy Profile Widget | 37 | 157 | 20 | 400 | Output is not escaped | ||
| #129 | JJ NextGen JQuery Carousel | 39 | 122 | 9 | 400 | Output is not escaped | ||
| #130 | Shortcodes in Sidebar | 98 | 4 | 0 | 400 | Missing direct file access protection | ||
| #131 | Simple Widget Title Links | 82 | 15 | 3 | 400 | Output is not escaped | ||
| #132 | Tuxedo Responsive Widget Columns | 78 | 19 | 3 | 400 | Output is not escaped |
