WooCommerce WordPress Plugins That Need Review
1,020 indexed plugins
Plugins
1,020
Active Installs
12m+
Average Score
56
Audited
1,016
Needs Review
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | MDTF – Meta Data and Taxonomies Filter | 16 | 1,550 | 1,956 | 1k+ | Non-prefixed global variable | ||
| #2 | Efí Bank | 17 | 886 | 553 | 400 | Exception output is not escaped | ||
| #3 | MBE eShip | 20 | 527 | 740 | 1k+ | Non-prefixed global variable | ||
| #4 | PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) | 20 | 440 | 750 | 400 | Missing direct file access protection | ||
| #5 | Pix por Piggly (para Woocommerce) | 20 | 547 | 195 | 4k+ | Exception output is not escaped | ||
| #6 | Remove Add to Cart WooCommerce | 20 | 616 | 1,378 | 4k+ | Non-prefixed global variable | ||
| #7 | Razorpay for WooCommerce | 20 | 974 | 855 | 100k+ | Non-prefixed function | ||
| #8 | CartFlows – Funnel Builder & Checkout Plugin for WooCommerce | 21 | 462 | 656 | 200k+ | Text Domain Mismatch | ||
| #9 | Free Downloads WooCommerce | 21 | 430 | 359 | 4k+ | Output is not escaped | ||
| #10 | Envo Extra | 21 | 878 | 600 | 20k+ | Text Domain Mismatch | ||
| #11 | Eupago Gateway For Woocommerce | 21 | 612 | 320 | 2k+ | Output is not escaped | ||
| #12 | Mergado Pack | 21 | 2,323 | 588 | 700 | Output is not escaped | ||
| #13 | Buckaroo Woocommerce Payments Plugin | 21 | 584 | 326 | 2k+ | Exception output is not escaped | ||
| #14 | Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools | 21 | 786 | 3,395 | 30k+ | Non-prefixed global variable | ||
| #15 | Pay For Post with WooCommerce | 21 | 960 | 1,474 | 1k+ | Non-prefixed global variable | ||
| #16 | WP-Lister Lite for eBay | 21 | 6,697 | 5,129 | 2k+ | Output is not escaped | ||
| #17 | Cleanup Action Scheduler | 22 | 545 | 1,306 | 1k+ | Non-prefixed global variable | ||
| #18 | Finale Lite – Sales Countdown Timer & Discount for WooCommerce | 22 | 1,031 | 451 | 4k+ | Output is not escaped | ||
| #19 | Heureka | 22 | 557 | 254 | 400 | Exception output is not escaped | ||
| #20 | Számlázz.hu integráció WooCommerce-hez | 22 | 1,169 | 460 | 7k+ | Text Domain Mismatch | ||
| #21 | Jim Soft Swiss QR Invoice | 22 | 262 | 392 | 400 | Non-prefixed global variable | ||
| #22 | Packeta | 22 | 801 | 333 | 8k+ | Exception output is not escaped | ||
| #23 | PagBank / PagSeguro Connect para WooCommerce | 22 | 504 | 757 | 4k+ | Non-prefixed global variable | ||
| #24 | PAYCOMET for WooCommerce | 22 | 1,206 | 423 | 2k+ | Text Domain Mismatch | ||
| #25 | Peach Payments Gateway | 22 | 334 | 143 | 1k+ | Non Singular String Literal Domain | ||
| #26 | Wenprise WeChatPay Payment Gateway For WooCommerce | 22 | 443 | 178 | 400 | Exception output is not escaped | ||
| #27 | WPSSO Core – Complete Schema Markup and Meta Tags | 22 | 1,407 | 412 | 5k+ | Missing Translators Comment | ||
| #28 | ЮKassa для WooCommerce | 22 | 590 | 168 | 9k+ | Short PHP open tag found | ||
| #29 | Autocomplete Address and Location Picker for WooCommerce | 23 | 630 | 1,299 | 2k+ | Non-prefixed global variable | ||
| #30 | Currency Exchange for WooCommerce | 23 | 692 | 505 | 500 | Output is not escaped | ||
| #31 | Disable Bloat for WordPress & WooCommerce | 23 | 863 | 1,325 | 10k+ | Non-prefixed global variable | ||
| #32 | Futurio Extra | 23 | 787 | 205 | 20k+ | Text Domain Mismatch | ||
| #33 | Import from YML | 23 | 97 | 308 | 400 | Non-prefixed global variable | ||
| #34 | License Manager for WooCommerce | 23 | 129 | 797 | 6k+ | Nonce verification recommended | ||
| #35 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | 23 | 4,065 | 488 | 20k+ | Text Domain Mismatch | ||
| #36 | Simple Newsletter Plugin – Noptin | 23 | 72 | 589 | 10k+ | Non-prefixed global variable | ||
| #37 | PayPal Brasil para WooCommerce | 23 | 554 | 328 | 1k+ | Unsafe printing function | ||
| #38 | Checkout with Zelle on Woocommerce | 23 | 637 | 1,404 | 3k+ | Non-prefixed global variable | ||
| #39 | Billingo Plus integráció WooCommerce-hez | 23 | 1,119 | 507 | 900 | Text Domain Mismatch | ||
| #40 | Germanized for WooCommerce | 23 | 222 | 1,054 | 70k+ | Non-prefixed global variable | ||
| #41 | Predictive Search for WooCommerce | 23 | 514 | 633 | 700 | Output is not escaped | ||
| #42 | StoreCustomizer – A plugin to Customize all WooCommerce Pages | 23 | 587 | 1,426 | 20k+ | Non-prefixed global variable | ||
| #43 | ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | 23 | 7,423 | 2,181 | 90k+ | Text Domain Mismatch | ||
| #44 | WP-Lister Lite for Amazon | 23 | 3,061 | 4,177 | 800 | Output is not escaped | ||
| #45 | XT Ajax Add To Cart for WooCommerce | 23 | 1,003 | 1,690 | 1k+ | Non-prefixed global variable | ||
| #46 | XT Variation Swatches for WooCommerce | 23 | 1,051 | 1,834 | 500 | Non-prefixed global variable | ||
| #47 | YITH Essential Kit for WooCommerce #1 | 23 | 397 | 1,481 | 5k+ | Non-prefixed global variable | ||
| #48 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress | 23 | 2,317 | 1,714 | 5k+ | Output is not escaped | ||
| #49 | Affiliates Manager | 24 | 1,268 | 653 | 8k+ | Unsafe printing function | ||
| #50 | Brands for WooCommerce | 24 | 787 | 674 | 6k+ | Text Domain Mismatch |
