Most Installed WooCommerce WordPress Plugins
1,023 indexed plugins
Plugins
1,023
Active Installs
12m+
Average Score
56
Audited
1,019
Most Installed
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #801 | CIELO API PIX, credit card, debit payment for WooCommerce | 56 | 11 | 121 | 700 | Nonce verification recommended | ||
| #802 | Mergado Pack | 21 | 2,323 | 588 | 700 | Output is not escaped | ||
| #803 | Page Restrict for WooCommerce | 29 | 579 | 374 | 700 | Text Domain Mismatch | ||
| #804 | POKY – Product Importer | 73 | 6 | 12 | 700 | Input is not validated | ||
| #805 | Term Description: Rich Text Editor (Powered by TinyMCE) for WooCommerce | 35 | 2 | 0 | 700 | Hidden files included | ||
| #806 | RiskPay Gateway: USDC Payouts for WooCommerce | 72 | 20 | 2 | 700 | Output is not escaped | ||
| #807 | SnapScan Payment Gateway | 41 | 33 | 30 | 700 | Output is not escaped | ||
| #808 | TrackingMore Order Tracking for WooCommerce (Free plan available) | 33 | 94 | 124 | 700 | Text Domain Mismatch | ||
| #809 | Veeqo for WooCommerce | 50 | 30 | 17 | 700 | Missing direct file access protection | ||
| #810 | Block Emails for WooCommerce Checkout | 91 | 4 | 3 | 700 | Setting is missing a sanitization callback | ||
| #811 | DPD SK for WooCommerce | 34 | 130 | 165 | 700 | Output is not escaped | ||
| #812 | Spreadconnect | 35 | 128 | 126 | 700 | Output is not escaped | ||
| #813 | Wenprise Alipay Gateway For WooCommerce | 29 | 113 | 68 | 700 | Exception output is not escaped | ||
| #814 | Sola Payment Gateway for WooCommerce | 35 | 107 | 116 | 700 | Missing Translators Comment | ||
| #815 | Products Coming Soon for WooCommerce | 38 | 151 | 62 | 700 | Output is not escaped | ||
| #816 | FedaPay Gateway for WooCommerce | 47 | 24 | 11 | 700 | Output is not escaped | ||
| #817 | BjornTech PayPal POS integration for WooCommerce | 34 | 68 | 182 | 700 | Non-prefixed hook name | ||
| #818 | SKU Label Changer For WooCommerce | 83 | 8 | 11 | 700 | Missing direct file access protection | ||
| #819 | Sofortueberweisung Gateway for Woocommerce | 29 | 104 | 71 | 700 | Output is not escaped | ||
| #820 | Total Sales Counts for WooCommerce | 40 | 121 | 62 | 700 | SQL query is not prepared | ||
| #821 | Predictive Search for WooCommerce | 23 | 514 | 633 | 700 | Output is not escaped | ||
| #822 | WP Notification Bell | 24 | 736 | 1,591 | 700 | Non-prefixed global variable | ||
| #823 | Pay with LINE Pay | 84 | 12 | 10 | 700 | Missing Translators Comment | ||
| #824 | WPC Smart Linked Products – Upsells & Cross-sells for WooCommerce | 88 | 29 | 700 | Nonce verification recommended | |||
| #825 | Add-on WooCommerce – MailPoet 3 | 48 | 30 | 21 | 600 | Output is not escaped | ||
| #826 | AgreeMe Checkboxes For WooCommerce | 40 | 88 | 44 | 600 | Text Domain Mismatch | ||
| #827 | Aplazame | 38 | 34 | 39 | 600 | Non-prefixed global variable | ||
| #828 | Beeketing for WooCommerce – Marketing Automation to Boost Sales | 34 | 113 | 123 | 600 | SQL query is not prepared | ||
| #829 | Яндекс Доставка (Boxberry) | 31 | 46 | 150 | 600 | Missing nonce verification | ||
| #830 | Boxy WooCommerce Custom Redirect After Checkout | 74 | 27 | 8 | 600 | badly named files | ||
| #831 | Cashflows for WooCommerce | 36 | 118 | 36 | 600 | Text Domain Mismatch | ||
| #832 | Checkout Upsell Funnel for WooCommerce | 44 | 6 | 244 | 600 | Non-prefixed global variable | ||
| #833 | Clearout Email Validator – Real-Time Email Verification on WordPress Forms | 68 | 21 | 80 | 600 | Non-prefixed function | ||
| #834 | Colete-Online | 30 | 776 | 346 | 600 | Text Domain Mismatch | ||
| #835 | Ultimate WooCommerce Filters | 32 | 322 | 207 | 600 | Unsafe printing function | ||
| #836 | Conditional Add to Cart for WooCommerce | 88 | 2 | 104 | 600 | Non-prefixed global variable | ||
| #837 | Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway | 99 | 3 | 4 | 600 | Missing direct file access protection | ||
| #838 | Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter | 37 | 151 | 61 | 600 | Output is not escaped | ||
| #839 | Custom Currency Sign | 99 | 3 | 0 | 600 | Text Domain Mismatch | ||
| #840 | DataFeedWatch Connector for WooCommerce | 64 | 16 | 112 | 600 | Non-prefixed hook name | ||
| #841 | Chwazi – Delivery & Pickup Scheduling for WooCommerce | 33 | 563 | 192 | 600 | Text Domain Mismatch | ||
| #842 | Dintero Checkout for WooCommerce Payment Methods | 35 | 58 | 48 | 600 | Text Domain Mismatch | ||
| #843 | EDI – Обмен данными между WooCommerce и 1С | 30 | 284 | 101 | 600 | Text Domain Mismatch | ||
| #844 | EasyParcel Shipping– All-in-one Shipping Solution, Real-Time Shipping Rates | 30 | 31 | 610 | 600 | Non-prefixed global variable | ||
| #845 | easypay Gateway Checkout for WooCommerce | 77 | 6 | 42 | 600 | Nonce verification recommended | ||
| #846 | Enhanced AJAX Add to Cart for WooCommerce | 46 | 90 | 78 | 600 | Missing Arg Domain | ||
| #847 | eSewa – Nepal First Payment Gateway | 77 | 48 | 9 | 600 | Text Domain Mismatch | ||
| #848 | Force Sell for WooCommerce | 24 | 697 | 455 | 600 | Text Domain Mismatch | ||
| #849 | g-FFL Checkout | 31 | 249 | 300 | 600 | Request data is not unslashed | ||
| #850 | GoUrl WooCommerce – Bitcoin Altcoin Payment Gateway Addon | 38 | 279 | 24 | 600 | Non Singular String Literal Domain |
