Plugin security profiles
One page per plugin: installed base, maintenance rhythm, disclosure history, PHP support and our recommendation. Updated when something changes, not on a schedule.
Plugin
Installs
Directory
Risk
Contact Form 7
Safe to keep. Add spam protection and, if you accept file uploads, restrict types and block PHP execution…
5 million+
Active
LOW
Elementor
Safe to keep if you update promptly. Audit your Elementor add-ons separately , that is where the real…
10 million+
Active
MEDIUM
Loginizer
Safe to keep. Ensure you are well past 1.6.4 and that two-factor authentication is enabled on administrators regardless.
1 million+
Active
LOW
Ninja Forms
Safe to keep if updated. If you use the File Uploads extension, confirm you are on 3.3.27 or…
600,000+
Active
MEDIUM
WooCommerce
Safe to keep and among the best-maintained plugins in WordPress. Your risk is almost entirely in the extensions…
6 million+
Active
LOW
Wordfence
Safe to keep. Just be clear about what it covers: it blocks and detects, it does not tell…
4 million+
Active
LOW