99Score
Simple Disable XML-RPC | Reduce Brute Force & DDOS Attacks
1k+ active installs
2 findings+0
WordPress Plugin Scores
Popular Categories
View allseo
152 audited - 29m+ installs
security
139 audited - 27m+ installs
editor
80 audited - 27m+ installs
contact form
85 audited - 25m+ installs
elementor
196 audited - 21m+ installs
performance
119 audited - 21m+ installs
xml sitemap
16 audited - 19m+ installs
gutenberg
136 audited - 19m+ installs
Recently Scanned
View latest
97Score
Algori Social Share Buttons
1k+ active installs
12 findings+0
26Score
ELEX WooCommerce Google Shopping (Google Product Feed)
1k+ active installs
468 findings+0
94Score
Visual User Description Editor
1k+ active installs
41Score
CloudGuard
1k+ active installs
54 findings+0
39Score
Reorder by Term
1k+ active installs
104 findings+0
Most Installed
View all
Contact Form 7
10m+ active installs - Missing direct file access protection
+069Watch
Elementor Website Builder – more than just a page builder
10m+ active installs - Non-prefixed global variable
+135Risk
Yoast SEO – Advanced SEO with real-time guidance and built-in AI
10m+ active installs - Non-prefixed global variable
+024Risk
Classic Editor
9m+ active installs - Unsafe printing function
+063Risk
LiteSpeed Cache
7m+ active installs - Non-prefixed global variable
+035Risk
Most Downloaded
View allYoast SEO – Advanced SEO with real-time guidance and built-in AI
968m+ downloads - Non-prefixed global variable
+024Risk
Elementor Website Builder – more than just a page builder
858m+ downloads - Non-prefixed global variable
+135Risk
Jetpack – WP Security, Backup, Speed, & Growth
494m+ downloads - Text Domain Mismatch
+023Risk
WooCommerce
448m+ downloads - Non-prefixed global variable
-121Risk
Wordfence Security – Firewall, Malware Scan, and Login Security
418m+ downloads - Output is not escaped
+021Risk
Browse Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Contact Form 7 | 69 | 56 | 39 | 10m+ | Missing direct file access protection | ||
| #2 | Elementor Website Builder – more than just a page builder | 35 | 46 | 428 | 10m+ | Non-prefixed global variable | ||
| #3 | Yoast SEO – Advanced SEO with real-time guidance and built-in AI | 24 | 159 | 386 | 10m+ | Non-prefixed global variable | ||
| #4 | Classic Editor | 63 | 17 | 7 | 9m+ | Unsafe printing function | ||
| #5 | LiteSpeed Cache | 35 | 286 | 893 | 7m+ | Non-prefixed global variable | ||
| #6 | WooCommerce | 21 | 1,359 | 6,172 | 7m+ | Non-prefixed global variable | ||
| #7 | Akismet Anti-spam: Spam Protection | 35 | 33 | 99 | 6m+ | Non-prefixed global variable | ||
| #8 | All-in-One WP Migration and Backup | 34 | 47 | 69 | 5m+ | Missing nonce verification | ||
| #9 | Site Kit by Google – Analytics, Search Console, AdSense, Speed | 25 | 1,304 | 242 | 5m+ | Missing direct file access protection | ||
| #10 | Wordfence Security – Firewall, Malware Scan, and Login Security | 21 | 1,592 | 2,973 | 5m+ | Output is not escaped | ||
| #11 | WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More | 31 | 165 | 271 | 5m+ | Non-prefixed global variable | ||
| #12 | Yoast Duplicate Post | 70 | 8 | 88 | 4m+ | Nonce verification recommended |
