Security Scorecard Grades For Million+ Install WordPress Plugins

The following Million+ Install plugins have been graded with the Plugin Security Scorecard:

  1. Loco Translate     B+
  2. Redirection     B+
  3. CookieYes     B
  4. Cookie Notice & Compliance for GDPR / CCPA     B
  5. Disable Comments     B
  6. Hostinger Tools     B
  7. MC4WP: Mailchimp for WordPress     B
  8. Maintenance     B
  9. Safe SVG     B
  10. WP Fastest Cache     B
  11. WPS Hide Login     B
  12. Advanced Custom Fields (ACF®)     C+
  13. Akismet Anti-spam     C+
  14. Autoptimize     C+
  15. Classic Editor     C+
  16. Classic Widgets     C+
  17. Contact Form 7     C+
  18. Custom Post Type UI     C+
  19. Yoast Duplicate Post     C+
  20. ElementsKit Lite     C+
  21. Envato Elements     C+
  22. Site Kit by Google     C+
  23. Redux Framework     C+
  24. Speed Optimizer     C+
  25. Yoast SEO     C+
  26. WP Mail SMTP     C+
  27. WP Super Cache     C+
  28. All-in-One WP Migration and Backup     C
  29. Better Search Replace     C
  30. Code Snippets     C
  31. Essential Addons for Elementor     C
  32. EWWW Image Optimizer     C
  33. Limit Login Attempts Reloaded     C
  34. OptinMonster     C
  35. Regenerate Thumbnails     C
  36. SVG Support     C
  37. Advanced Editor Tools     C
  38. W3 Total Cache     C
  39. WordPress Importer     C
  40. Complianz     D+
  41. LiteSpeed Cache     D+
  42. Rank Math SEO     D+
  43. Loginizer     D
  44. Really Simple Security     D
  45. All in One SEO     F
  46. All-In-One Security (AIOS)     F
  47. Starter Templates     F
  48. Duplicate Page     F
  49. Duplicator     F
  50. Elementor     F
  51. MonsterInsights     F
  52. XML Sitemap Generator for Google     F
  53. Ultimate Addons for Elementor (Formerly Elementor Header & Footer Builder)     F
  54. Image Optimizer     F
  55. WPCode     F
  56. Smash Balloon Social Photo Feed     F
  57. Jetpack     F
  58. Security Optimizer     F
  59. Spectra Gutenberg Blocks     F
  60. UpdraftPlus     F
  61. WooCommerce     F
  62. Wordfence Security     F
  63. WP File Manager     F
  64. WP-Optimize     F
  65. Smush Image Optimization     F
  66. WPForms Lite     F

Latest Grade From June 12, 2025

Plugin Missing?

Is a plugin missing from the list? If the plugin hasn't been graded yet, it can't be listed. You can check it below. Once plugins have been graded, we manually categorize them. If a plugin that hasn't just been graded isn't listed, please let us know that it is missing from the category.

Check Another Plugin






Check Plugin Not in WordPress Plugin Directory

Subscribers of our service can submit ZIP files of plugins that are not in the WordPress Plugin Directory to have them checked. (Not all issues can be checked for with uploaded plugins, as they require data not available with just the plugin's files.) You can sign up for the service for free here. For existing subscribers, once you are logged in to your account, return to this page to access that functionality.

The results of these gradings will not be stored.

About the Scorecard

The Plugin Security Scorecard grades plugins' handling of security based on data coming from the Plugin Vulnerabilities service, checking over the contents of the plugin, the WordPress.org API, and data generated specifically for the tool. It provides a useful, but incomplete, understanding of the security posture of the plugin and its developer. All the issues identified are ones that the developer of the plugin has the ability to address to get the grade of the plugin up to an A+.

Grades are calculated based on issues with any of the following:

  • Plugins known to be vulnerable
  • Plugin developers with track records of improperly handling security problems
  • Security issues in the plugin that can be detected in an automated fashion
  • Issues with the developer's developerment processes that suggest that their could be problems with security
  • Plugins making unsupported, misleading, and false claims about their handling of security and the handling of security with WordPress

We are working to expand and refine the tools' ability to provide a good measure of plugins' security status. If you are aware of an additional security concern with this plugin that isn't represented here, please contact us. Other feedback on the tool is also welcome.

If you want a comprehensive understanding of the security of the plugin, a well-done security review is really needed to provide that.