Explore the most commonly installed WordPress plugins across our domain database, along with infrastructure security scores associated with each plugin's user base. Data updates continuously as domains are rescanned.
Security Exposures by Top 30 Plugins
Coloured against the all-WordPress average — green beats it, red is worse. Site counts use TLDWP's canonical detected population; percentages use the corresponding cached security sample. Click a column to sort.
| # | Plugin | Sites | Fail headers | Leak usernames | Exposed files | HTTPS |
|---|---|---|---|---|---|---|
| 1 | contact-form-7 | 1,699,668 | 87.7% | 43.5% | 2.2% | 96% |
| 2 | elementor | 1,696,826 | 84.2% | 40.4% | 1.7% | 95.9% |
| 3 | elementor-pro | 1,010,880 | 82.3% | 36.9% | 1.7% | 96.1% |
| 4 | woocommerce | 784,675 | 84.1% | 35.7% | 2.6% | 95% |
| 5 | revslider | 582,874 | 86.7% | 38.3% | 2.6% | 95.6% |
| 6 | jetpack | 406,515 | 86.8% | 55.7% | 1.4% | 95.8% |
| 7 | js_composer | 402,159 | 86.5% | 37.7% | 2.9% | 95.9% |
| 8 | wp-rocket | 317,057 | 76.6% | 24.9% | 2.1% | 97.2% |
| 9 | google-site-kit | 258,615 | 80.4% | 38.1% | 1.9% | 96.4% |
| 10 | essential-addons-for-elementor-lite | 251,862 | 83.1% | 36% | 1.7% | 95.3% |
| 11 | complianz-gdpr | 248,879 | 83.9% | 32.8% | 1.9% | 96.1% |
| 12 | gravityforms | 247,387 | 71.2% | 22.5% | 1.4% | 97.1% |
| 13 | cookie-law-info | 220,240 | 82.5% | 35.9% | 2.1% | 96.4% |
| 14 | instagram-feed | 216,550 | 85.8% | 42.2% | 1.9% | 95.8% |
| 15 | sitepress-multilingual-cms | 203,938 | 75.9% | 27.4% | 2.5% | 96.3% |
| 16 | header-footer-elementor | 196,132 | 86.9% | 43.6% | 1.6% | 95.1% |
| 17 | google-analytics-for-wordpress | 195,195 | 82.3% | 37.9% | 2.1% | 95.8% |
| 18 | bluehost-wordpress-plugin | 186,988 | 96.7% | 57.4% | 0.1% | 93.1% |
| 19 | elementskit-lite | 170,188 | 84.9% | 39.9% | 1.6% | 95.4% |
| 20 | litespeed-cache | 143,537 | 71.7% | 32.9% | 1.8% | 97.1% |
| 21 | gutenberg | 139,554 | 86.3% | 56.5% | 0.4% | 98.1% |
| 22 | cookie-notice | 142,481 | 86.1% | 39.6% | 2.2% | 96.2% |
| 23 | gutenberg-core | 120,500 | 99.6% | 0% | 0% | 96% |
| 24 | gtranslate | 118,984 | 83.2% | 37.6% | 2.1% | 96.1% |
| 25 | the-events-calendar | 117,989 | 80.8% | 35% | 2% | 94.9% |
| 26 | wpforms-lite | 115,735 | 82.3% | 44% | 1.7% | 95.4% |
| 27 | astra-sites | 106,045 | 87.9% | 49.5% | 1% | 94.4% |
| 28 | popup-maker | 104,824 | 79% | 30.2% | 2.2% | 96.2% |
| 29 | woocommerce-payments | 101,733 | 83.7% | 42.4% | 2.1% | 95% |
| 30 | tablepress | 100,486 | 82.1% | 35.6% | 2.4% | 95.7% |
All Plugins 52,164 total
Page 1 of 522
Next »