-
-
Notifications
You must be signed in to change notification settings - Fork 115
/
Copy pathblacklist.txt
2166 lines (2132 loc) · 126 KB
/
blacklist.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;; author: SlickStack ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;; link: https://slickstack.io ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;; mirror: littlebizzy/slickstack/blob/master/modules/wordpress/blacklist.txt ;;;;;;;;;;;;;;;;;;;;
;;;; path: /var/www/html/wp-content/blacklist.txt ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;; destination: n/a (not a boilerplate) ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;; purpose: Plugin Blacklist configuration file (with related comments by LittleBizzy) ;;;;;;;;;;;
;;;; module version: Plugin Blacklist 2.0.x + WordPress 6.7.x ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;; sourced by: n/a ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;; bash aliases: n/a ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;; ARE YOU A WEB HOST USING SLICKSTACK? DEFINE A CUSTOM PLUGIN BLACKLIST IN SS-CONFIG! ;;
;; In most cases, plugins will be added by LittleBizzy to the Future blacklist first to give ;;
;; webmasters time to find alternatives (typically several months or longer). However, in ;;
;; cases of malware, crashing, thrashing, or other serious issues, plugins are banned ;;
;; immediately via the Active blacklist (rare, but sometimes necessary). ;;
;; The goal of SlickStack is to maximimize speed, stability, and security, along with ;;
;; championing the open web and competition -- and thus, inter-compatibility. We frown on ;;
;; page builder plugins or themes (etc) that try to lock-in webmasters to using ;;
;; their own proprietary frameworks or sister products. It is always better to avoid ;;
;; page builder plugins entirely, in fact, and rely only on themes. That said, if you want ;;
;; to use one, always choose a page builder that offers an open source (free) version ;;
;; in order to avoid as much lock-in and licensing as possible. ;;
;; Recommended page builders: Gutenberg, SiteOrigin, Beaver Builder, Elementor. ;;
;; BEWARE PROPRIETARY / LOCK-IN PAGE BUILDERS: Oxygen, Qards, Thrive Architect, Divi Builder, ;;
;; Fusion (Avada) Builder, Ebor (Aqua), WP Bakery (Visual Composer), etc. ;;
;; Avoid plugins more than "2 levels" deep... any plugin you install should only affect the ;;
;; open source CMS or micro-platform above it; do not rely on plugins that alter or customize ;;
;; proprietary or nonintuitive themes or plugins, or those released by other vendors. For ;;
;; example, a plugin that modifies WordPress or WooCommerce is a good idea, but a plugin that ;;
;; modifies another vendor's product e.g. Elementor, Divi theme, or Yoast SEO is generally ;;
;; a bad idea and often results in code conflicts and maintenance issues later. ;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;; Blacklist.txt: Glossary Of Terms ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;; we try hard to avoid making this blacklist a judgement of moral or political leanings ;;
;; however we do blacklist extreme cases of fraud, cronyism, and repeat abuses ;;
;; ss conflicts = conflicts with SlickStack (default MU plugins or LEMP stack modules)
;; hacks third-party design products = alters frontend layout products from other vendors
;; bloated = extremely heavy or slow scripts beyond what should be necessary
;; excessive logging = abuses the MySQL database for logging in ways that are bad practice
;; excessive api calls = abusive amount of external API calls (i.e. bloated API)
;; ransomware = illegally blocks access to scripts in violation of the GPL license
;; spyware = tracks WP or traffic analytics without opt-in or in otherwise deceitful ways
;; creates instability = foolish or bad practice scripts that hurt WP stability
;; poor coding = history of very bad quality or careless coding practices
;; poor maintenance = rarely releases patches or updates that would otherwise be expected
;; hijacks wp functions = tries to replace (stable) WP Core functions with their own
;; hjacks wp admin = repeat or long-term abuse of the WP Admin backend (e.g. spam, etc)
;; serious errors = repeat or long-term errors that seriously hurt functionality
;; database thrashing = abusive SQL queries that result in CPU spikes, RAM exhaustion, etc
;; code theft = illegally steals code from other GPL products without credits
;; death threats = authors sent death threats to SlickStack or other WP developers
;; brand abandoned = the company no longer updates or maintains their various products
;; deprecated = the script has been officially shut down by the original author
;; consumer fraud = repeat and long-term deceptive marketing practices that confuse users
;; exploitable = current or repeated instances of hackable code (security holes)
;; potential data loss = functions that could result in the mass loss of files or data
;; better options exist = several other similar scripts exist with better functions
;; smtp risks = risks getting your server/domain blacklisted as an email spammer
;; resource intensive = uses too many server resources than should typically be needed
;; theme-specific custom post types = generates CPTs that only support their own WP themes
;; theme-specific code ;; generates data/code that cannot be used by other WP themes
;; no public changelog = no public documentation of code/version changes or patches
;; wp cronyism = regularly abuses influence by trying to acquire unfair market advantage
;; violates GPL terms = illegally breaks the guidelines required by the GPL license
;; requires api validation = design/content will disappear if api credentials unaccepted
;; political censorship = products that arbitrarily deplatform or censor non-violent speech
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;; 1. Long-Term Disallowed Vendors (Recurring Technical Or Ethical Reasons) ;;;;;;;;;;;;;;;;;;;;;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;; Alex Panagis ;; consumer fraud, harassment, slander ;;
;; Astra Theme (Brainstorm Force) ;;
;; Awesome Motive ;; dmca fraud, WP Admin spam, cronyism, breaks the rules of WP.org without consequences, too many reasons to list
;; BeSquares ;; brand abandoned ;;
;; Bhanu Ahluwalia ;; consumer fraud, spyware, ransomware ;;
;; Brainstorm Force ;; bloated, creates instability, hacks third-party design products, lock-in issues ;;
;; Brian Lee Jackson ;; consumer fraud, code theft ;;
;; bringthepixel (Bimber theme) ;; poor coding, bloated, theme-specific code, no public changelog ;;
;; Crocoblock ;; poor coding, serious errors, hacks third party design products ;;
;; Jetpack ;; bloated, spammy, hijacks wp admin, lacks transparency, resource intensive, wp cronyism ;;
;; Joost de Valk ;; bloated, spammy, hijacks wp admin, poor coding, wp cronyism
;; Kinsta (Brian Jackon, Alex Panagis, Jon Penland, Mark Gavalda) ;;
;; Kodemann ;; brand abandoned ;;
;; Lumin Apps ;; brand abandoned ;;
;; Macho Themes (Alex Panagis) ;; consumer fraud ;;
;; MailChimp ;; political censorship
;; Monster Insights ;; bloated, spammy, hijacks wp admin, bad practice ;;
;; MyThemeShop (Bhanu Ahluwalia, Suraj Vibhute) ;; consumer fraud, spyware, ransomware, violates GPL terms, death threats ;;
;; OneTone theme ;; exploitable (via Sucuri), brand abandoned
;; Noah Kagan ;; bloated, excessive API calls, poor maintenance, illegal email spam
;; OptimizePress ;;
;; Qode Themes ;; poor coding, errors, poor maintenance
;; Rank Math SEO (Bhanu Ahluwalia, Suraj Vibhute) ;; consumer fraud, spyware, ransomware, violates GPL terms, death threats
;; PerfMatters (Brian Lee Jackson) ;; code theft ;;
;; Pipdig (Phil Clothier) ;; spyware ;;
;; Phil Clothier ;; spyware ;;
;; RadiantThemes ;; breaks all kinds of best practices, creates instability, poor coding, locked-in CPTs
;; Samuel "Otto" Wood ;; wp cronyism, consumer fraud
;; ShortPixel ;; bloated, resource intensive, spammy, generates junk files
;; Smart Slider (Alex Panagis) ;;
;; snapCX.io ;; brand abandoned ;;
;; Social Actions ;; brand abandoned ;;
;; SumoMe ;; bloated, excessive API calls, poor maintenance
;; Suraj Vibhute ;; consumer fraud, spyware, ransomware ;;
;; Swift Ideas ;; bloated, bad practices (bundles theme-specific custom post types, etc) ;;
;; Syed Balkhi ;; spammy, bloated, wp cronyism, better options exist ;;
;; Team Yoast ;; spammy, deceptive
;; The Web Design Hub ;; brand abandoned ;;
;; Themeco ;; serious conflicts, hijacks wp core, no public changelogs, theme-specific page builder
;; ThemeFusion (Avada) ;; bloated, everything is proprietary
;; ThemePunch (Revslider) ;; bloated, history of exploits
;; Thrive Themes ;; bloated, poor coding, excessive logging, serious errors, hijacks wp core functions
;; Vafour (Vafpress Framework) ;; brand abandoned, not maintained ;;
;; Warfare Plugins, etc (Dustin W. Stout, Jason T. Wiser, Nicholas Z. Cardot) ;;
;; WebFactory Ltd ;; history of exploits, history of poor coding ;;
;; Yotpo ;; ransomware
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;; 2. Short-Term Disallowed Vendors (Resolvable Critical Issues) ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;; Rymera Web ;; WP-Cron abuse, database thrashing
;; Josh Kohlbach (Rymera Web) ;; blames SlickStack for his poor code instead of fixing it
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;; 3. Not Recommended Vendors (Possibly Long-Term Disallowed In The Future) ;;;;;;;;;;;;;;;;;;;;;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;; BestWebSoft ;;
;; Bootstrapped Ventures ;; conflicts with Nginx caching, overuse of REST API, etc
;; Contempo Themes (Chris Robinson) ;; exploitable, poor coding, poor maintenance, many plugins are theme-specific, no public changelogs
;; Course Cats ;; excessive API calls, poor coding
;; Divi Life ;; all products hack third-party design products
;; Drfuri ;; not maintained, no public changelogs, hacks third-party design products
;; Eric Turnnessen (MemberMouse) ;;
;; Elegant Themes (Divi) ;;
;; Elfsight ;; poor coding, database thrashing, serious errors, resource intensive
;; Future Design Group ;; poor coding, poor maintenance
;; Genesis Framework ;; proprietary frameworks
;; Gijo Varghese ;;
;; IntellyWP ;; bloated, poor coding, serious errors, violates GPL terms
;; Leadpages ;; bloated, poor maintenance, creates instability
;; MemberMouse ;; poor coding, MySQL data loss, does not use their own software, blames SlickStack for their errors
;; Mikado Themes ;; theme-specific CTPs and plugins, etc
;; Nextend (Roland Soos, Daniel David) ;; consumer fraud
;; NicheAddons ;; hacks third-party design products
;; Om Ak Solutions (Ankit Singla, Nikhil Khokhar, Savi Goyal) ;;
;; OnTheGoSystems (WPML, Toolset) ;; bloated, poor coding, security issues
;; Photocrati (Imagely / NextGen Gallery) ;;
;; PixelYourSite ;; spammy, hijack WP Admin ;;
;; Redux Framework + Dovy Paukstys ;; has drastically shifted from a general theme options framework to Gutenberg middleman/spammy
;; SmartDataSoft ;; poor coding, bad practices (e.g. theme-specific plugins, etc) ;;
;; Sridhar Katakam ;;
;; StudioPress ;; proprietary frameworks
;; TagDiv ;; various bad practices, excessive logging, history of exploits
;; ThemeGoods ;; bundles theme-specific custom post types plugins
;; WP Desk ;; poor coding, tracking (spyware)
;; WPClever.net ;;
;; WPDeveloper ;; poor coding
;; WpIndeed ;; poor coding, serious errors
;; WPMU DEV ;;
;; YITH ;; spammy, security issues, poor coding
;; Upsolution / Us Theimes ;; poor coding
;; Zendesk ;; poor maintenance, sues anyone who users the ancient Chinese term "zen"
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;; Blacklist.txt: Active Blacklist (Currently Disallowed Plugins) ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;; match any path (case insensitive)
;; for exact directory matches use slashes e.g. /revslider/
[blacklist]
10web-manager ; vendor specific, no public changelog (By 10Web)
2-click-socialmedia-buttons ; not maintained
/301-redirects/ ; not maintained
/404s/ ; excessive logging
404-error-monitor ; excessive logging, not maintained
404-notifier ; excessive logging, not maintained
404-redirected ; excessive logging, not maintained (by Remkus de Vries)
404-redirection-manager ; excessive logging, serious errors, not maintained
404-solution ; excessive logging, bad practice (By Aaron J)
404-to-301 ; excessive logging
6scan-backup ; ss conflicts, not maintained, resource intensive
6scan-protection ; ss conflicts, not maintained, resource intensive
a2-optimized-wp ; vendor specific
a2-w3-total-cache ; ss conflicts, vendor specific, bloated
above-the-fold-optimization ; deprecated
accesspress-social-auto-post ; resource intensive, bad practice
aceide ; feature exists in wp core
/actifend/ ; not maintained, ss conflicts
acf-content-analysis-for-yoast-seo ; blacklisted dependent plugin
acf-yith-woocommerce-compare-support ; not maintained (by YITH Themes)
activity-reactions-for-buddypress ; bloated, not maintained
add-category-to-pages ; bad practice, creates instability, poor coding
add-expires-headers ; ss conflicts, bad practice (By Passionate Brains)
add-index-to-autoload ; ss conflicts, feature exists in WP Core 5.3+ already
add-social-share ; not maintained
/add-to-any/ ; adware, spyware, bloated
addon-elements-for-elementor-page-builder ; hacks third-party design products
addons-for-beaver-builder ; hacks other vendor products, creates instability, bad practice (buy the Pro version)
addons-for-elementor ; hacks third-party design products (By Livemesh)
addfreestats ; excessive logging
addthis-follow ; not maintained
addthis ; not maintained
addthis-all ; not maintained
admin-management-xtended ; resource intensive, pointless
admin-menu-editor ; creates instability
adminer ; exploitable, creates instability
adsense-click-fraud-monitoring ; deprecated
Advanced-Custom-Fields-Multilingual ; possible thrashing, not maintained
advanced-database-cleaner ; ss conflicts
advanced-menu-widget ; serious errors, not maintained (by Ján Bočínec)
advanced-speed-increaser ; ss conflicts
advanced-wp-reset ; ss conflicts, potential data loss
advanced-wpperformance ; ss conflicts, creates instability
aioseo-redirects ; lock-in (Requires AIOSEO Pro to manage 301 redirects), better options exist
airlift ; ss conflicts
ajax-load-more ; resource intensive, creates instability (by Darren Cooney)
ajax-store-locator-wordpress ; not maintained, exploitable, resource intensive
ajax-thumbnail-rebuild ; database thrashing
akeebabackupwp ; unsafe local archives
all-404-redirect-to-homepage ; spammy, better options exist
all-in-one-redirection ; excessive logging
all-in-one-seo-pack ; disabling other SEO plugins in violation of WP.org guidelines because Matt is cronies with Syed
all-in-one-webmaster ; pointless, better options exist
all-in-one-wp-security-and-firewall ; bloated
all-social-fw-style-widget ; not maintained
allow-php-execute ; php hacks
alinks ; deprecated, serious errors
Alinks ; deprecated, serious errors
alpine-photo-tile-for-instagram ; not maintained, better options exist, no public changelog
amazon-s3-and-cloudfront ; ss conflicts, potential data loss
amazon-s3-and-cloudfront-pro ; ss conflicts, potential data loss
/amp/ ; bad practice, spyware (By Google)
amp-html-sitemap ; not maintained, bad practice (HTML sitemaps unnecessary)
amp-plugin-manager ; ss conflicts (creates MU plugins) By Ahmed Kaludi, Mohammed Kaludi
analyticator-google-analytics ; not maintained
analytics-code ; not maintained
analytics-counter ; deprecated (By WPAdm.com)
analytify-analytics-dashboard-widget ; bloated, resource intensive (By Analytify)
/antivirus/ ; resource intensive, ss conflicts
anywhere-elementor ; database thrashing, hacks third-party design products (By WP Vibes)
anywhere-elementor-pro ; database thrashing, hacks third-party design products (By WP Vibes)
apex-digital-toolbox ; bloated, bizarre code, not maintained
/apikey/ ; known malware
app-for-cf ; bad practice these days
aqua-page-builder ; not maintained (By Syamil MJ)
ari-adminer ; serious errors, potential data loss (adminer better used as standalone script)
artbees-captcha ; not maintained, no public changelog, better options exist (By José Rodríguez) a.k.a. Cool PHP Captcha
aryo-activity-log ; excessive logging
askapache-debug-viewer ; php hacks
askapache-google-404 ; serious errors, not maintained
aspexi-login-audit ; excessive logging, not maintained
asta-html-minifier ; ss conflicts
astra-addon ; spyware
astra-pro-sites ; spyware, vendor specific
astra-sites ; requires blacklisted plugins by Brainstorm Force that hack third party design products (By Brainstorm Force)
astra-pro-sites ; requires blacklisted plugins by Brainstorm Force that hack third party design products (By Brainstorm Force)
async-javascript ; creates instability
async-social-sharing ; not maintained
asynchronous-javascript ; not maintained
attachment-pages-redirect ; ss conflicts, bad practice
authentication-and-xmlrpc-log-writer ; not maintained, bad practice, pointless
/authorizer/ ; ss conflicts, excessive logging
/authors-page/ ; not maintained
authorizenet-payment-gateway-for-woocommerce ; serious errors, poor coding, better options exist
authorsure ; deprecated
auto-clean-url-seo ; pointless, many conflicts, not maintained
auto-install-free-ssl ; ss conflicts
/auto-link/ ; not maintained, creates instability
auto-link-genius ; not maintained, creates instability
auto-tag-links ; not maintained, creates instability
/auto-updates/ ; ss conflicts, creates instability (By Michal Novak)
autoloader ; ss conflicts
autologin-links ; exploitable, pointless
/automatewoo/ ; thrashing, bloated, excessive logging, resource intensive
automatic-copyright-year ; pointless, not maintained
automatic-wordpress-backup ; ss conflicts, resource intensive, not maintained
autoupdater ; vendor specific (WP Engine)
backlink-rechecker ; not maintained, resource intensive
/backup/ ; ss conflicts, unsafe local archives
backup-scheduler ; unsafe local archives, resource intensive
backup-wd ; ss conflicts, unsafe local archives
backupbuddy ; resource intensive, unsafe local archives
backupwordpress ; unsafe local archives
; backwpup ; unsafe local archives, resource intensive
bad-behavior ; deprecated
barbwire-security ; ss conflicts
baw-post-views-count ; excessive logging, bloated, not maintained
bb-addons ; hacks other vendor plugins
bb-bootstrap-alerts ; hacks third-party design products (by Brainstorm Force)
bb-bootstrap-cards ; hacks third-party design products (by Brainstorm Force)
bb-header-footer ; hacks third-party design products (by Brainstorm Force)
; bb-plugin ; hacks third-party design products, bad practice (overrides theme settings)
bb-ultimate-addon ; creates instability, hacks third-party design products, no public changelog (By Brainstorm Force)
bb-theme-builder ; hacks third-party design products, no public changelog, creates instability, bad practice (overrides theme settings) aka Beaver Themer
bdthemes-element-pack ; hacks third-party design products (by BdThemes)
beautiful-social-widget ; not maintained
beaver-builder-addons ; hacks other vendor plugins
; beaver-builder-lite-version ; hacks third-party design products, bad practice (overrides theme settings)
before-and-after-slider-for-vc ; not maintained
best-wp-smtp-email ; blacklist risk (smtp)
better-analytics ; not maintained
/better-related/ ; not maintained, resource intensive
better-rss-widget ; not maintained
better-wordpress-minify ; ss conflicts
better-wp-security ; bloated
bfi-thumb ; deprecated
biagiotti-core ; theme-specific CPTs (By Mikado Themes)
bj-lazy-load ; not maintained (by Bjørn Johansen, Aron Tornberg, angrycreative)
black-studio-tinymce-widget ; not maintained, similar feature exists in wp core, bloated, creates instability (By Black Studio)
blizhost-cache-purge ; vendor specific
block-bloglovin-iframe ; malware company (Pipdig)
blog-manager-light ; bloated, serious errors, creates instability, bad practices (conflicting features) By OTWthemes
blog-manager ; bloated, serious errors, creates instability, bad practices (conflicting features) By OTWthemes
block-wp-login ; ss conflicts
blogger-importer-extended ; malware company (Pipdig)
bloglovin-button ; malware company (Pipdig)
bloglovin-widget ; malware company (Pipdig)
blogvault ; ss conflicts, resource intensive
bluehost-site-migrator ; vendor specific
BoosterPage ; deprecated, poor code, no public docs (Smart Marketer)
bottom-of-every-post ; not maintained (By Corey Salzano)
bounce-handler-mailpoet ; ss conflicts, bad practice (smtp, php mail)
brave-payments-verification ; not maintained, pointless, bad practice (should be done via SFTP etc)
/breeze/ ; vendor specific (Cloudways cache plugin)
breezing-forms ; poor maintenance, political censorhip (only supports MailChimp) By Crosstec
broken-link-checker ; resource intensive, not maintained, excessive logging
brute-force-login-protection ; excessive logging, ss conflicts, not maintained
bruteprotect ; not maintained
bs-input ; brand abandoned, bloated, excessive API calls (By BeSquares)
bsf-changelog ; pointless (by Brainstorm Force)
bsf-docs ; pointless (by Brainstorm Force)
buddypress-google-plus ; deprecated
bugherd ; ss conflicts?
bulk-image-alt-text-with-yoast ; spammy, bad practice, creates instability
business-badges ; deprecated
businesspress ; bizarre code, creates instability
buttonizer-multifunctional-button ; spyware, adware
bv-cloudways-automated-migration ; vendor specific
bwp-google-xml-sitemaps ; not maintained, resource intensive
bwp-minify ; not maintained, creates instability
bws-smtp ; blacklist risk (smtp)
cache-cleaner ; ss conflicts
cache-control ; ss conflicts
cache-enabler ; ss conflicts
cache-images ; resource intensive, bizarre code, bad practice, not maintained
cache-performance ; creates instability, ss conflicts, bad idea
/cachify/ ; not maintained
/captcha/ ; deprecated
car-repair-services-core ; theme-specific custom post types (By SmartDataSoft)
/carla/ ; bizarre code, ss conflicts
casals-online-seo ; not maintained
category-color ; bad practice (not a good way to adjust CSS colors) By Zayed Baloch
category-for-pages ; not maintained, creates instability
cf-image-resizing ; bad practice
cf-littlebizzy ; ss included
cf-post-formats ; deprecated (a.k.a. WP Post Formats by Crowd Favorite)
change-table-prefix ; ss conflicts, bad practice, creates instability
change-password-protected-message ; malware company (Pipdig)
change-wp-admin-login ; ss conflicts (By Nuno Morais Sarmento)
check-and-enable-gzip-compression ; ss conflicts (apache)
cimy-swift-smtp ; blacklist risk (smtp)
clean-up-booster ; bloated, excessive logging
clear-cache-for-widgets ; vendor specific
clearfy ; bloated, ss conflicts
/clickfunnels/ ; not maintained, serious errors, creates instability, landing page imports, private page builder (by Etison, LLC)
/clicky/ ; fatal errors, better options exist (by Team Yoast)
clink ; not maintained, better options exist
cloudbric-basic-ssl ; not maintained
/cloudflare/ ; bloated
cloudflare ; ss conflicts
cloudflare-cache-purge ; ss conflicts
cloudflare-flexible-ssl ; ss conflicts
cloudflare-littlebizzy ; ss conflicts
cloudflare-rocket-loader-manual-settings ; not maintained, ss conflicts
cloudflare-threat-management ; not maintained, ss conflicts
cloudguard ; malware company (Pipdig)
cloudinary-image-management-and-manipulation-in-the-cloud-cdn ; poor code, creates instability, ss conflicts
cloudways ; vendor specific
cms-tree-page-view ; creates instability, potential data loss, resource intensive
co-authors-plus ; serious errors, creates instability, not maintained
codeguard ; ss conflicts, unstable
codepress-admin-columns ; creates instability
collapsing-categories ; serious errors, not maintained, creates instability
column-separator-for-beaver-builder ; hacks third-party design products (by Brainstorm Force)
comet-cache ; ss conflicts
comment-engine-pro ; not maintained
/comment-images/ ; deprecated (By talspotim)
/comments-ratings/ ; not maintained
companion-sitemap-generator ; bad practice (HTML sitemaps unnecessary)
compressed-emoji ; bloated, not maintained
connect-polylang-elementor ; hacks third-party design products (By Creame)
contact-form-7-datepicker ; exploitable (per Wordfence), deprecated (By Aurel Canciu)
contact-form-7-datepicker-fix ; not maintained (By Benjamin Klein)
contact-form-7-to-database-extension ; deprecated (Contact Form DB)
contempo-real-estate-custom-posts ; exploitable, theme-specific CPTs (By Contempo Themes)
ct-compare-listings ; exploitable, theme-specific, no public changelog (By Contempo Themes)
ct-membership-packages ; exploitable, theme-specific, bad practice (should be split into various independent plugins), no public changelog (By Contempo Themes)
ct-mortgage-calculator ; exploitable, theme-specific, no public changelog (By Contempo Themes)
ct-real-estate-7-extensions-loader ; exploitable, theme-specific, no public changelog (By Contempo Themes)
ct-real-estate-7-payment-gateways ; exploitable, theme-specific, no public changelog (By Contempo Themes)
contempo-saved-searches-email-alerts ; exploitable, theme-specific, no public changelog (By Contempo Themes)
/content-links/ ; deprecated (By WPAdm.com)
/content-locker/ ; spyware company, poor coding, serious errors, political censorship (only supports MailChimp) better options exist (MyThemeShop)
control-xml-rpc-publishing ; deprecated
constant-contact-forms ; serious errors, poor maintainance
constant-contact-signup-form-widget ; not maintained
copy-delete-posts ; hijacks wp core, spammy, serious errors, better options exist
cookies-for-comments ; ss conflicts, bad practice, not maintained
cool-php-captcha ; not maintained, no public changelog, better options exist (By José Rodríguez) a.k.a. Artbees Captcha
counterize ; excessive logging, not maintained
counterize-ii ; excessive logging, not maintained
country-caching-extension-for-wp-super-cache ; ss conflicts
creative-clans-embed-script ; better options exist, not maintained (by Guido Tonnaer)
cred-frontend-editor ; deprecated
crudlab-google-plus ; deprecated
css-above-the-fold ; not maintained
css-js-query-string-remover ; ss conflicts
css-share-buttons ; not maintained
ct-child-theme ; no public changelog, better options exist (By Contempo Themes)
ctw-ssl-for-cloudflare ; ss conflicts
current-date-time-widget ; not maintained
custom-404-error-page ; not maintained
custom-typekit-fonts ; creates instability, bad practice, hacks third-party design products (by Brainstorm Force)
custom-facebook-and-google-thumbnail ; deprecated
/custom-fonts/ ; bloated, creates instability, bad practice (use CSS instead) (By Brainstorm Force)
custom-functions ; ss conflicts (installed as an MU plugin already) By LittleBizzy
custom-functions-littlebizzy ; ss conflicts (installed as an MU plugin already) By LittleBizzy
custom-css-js ; bad practice, creates instability, ransomware, better options exist (Simple Custom CSS And JS)
custom-links-in-wp-toolbar ; pointless, ss conflicts (by Brainstorm Force)
custom-link-widget ; not maintained
custom-my-account-for-woocommerce ; bad practice (should be done using theme template files), not maintained, poor coding, bloated (By phoeniixx)
custom-one-click-seo-sitemap ; not maintained, bad practice (HTML sitemaps unnecessary)
custom-registration-form-builder-with-submission-manager ; bloated, exploitable, excessive logging, creates instability (a.k.a. Registration Magic)
custom-script-integration ; not maintained, better options exist
custom-searchable-data-entry-system ; exploitable (via WordFence), deprecated (by Ghazale Shirazi)
custom-share-buttons-with-floating-sidebar ; excessive logging, better options exist
custom-sidebars ; exploitable (malware found), bad practice, resource intensive, errors/conflicts, spamware (WPMU lock-in)
custom-taxonomy-order-ne ; potential data loss, bad practice (By Marcel Pol)
custom-template-learndash ; hacks third-party design products (by Brainstorm Force)
custom-user-profile-photo ; not maintained, serious errors, bad practice (enables externally hosted profile photos) By VincentListrani
custom-vc-column-layout ; not maintained, hacks third party design products (By Cenemil Jones Sumbalan)
customizer-reset-by-wpzoom ; ss conflicts, potential data loss
customizer-search ; pointless
cute-slider ; deprecated (Envato product)
cuteslider ; deprecated (Envato product)
CuteSlider ; deprecated (Envato product)
cw-image-optimizer ; not maintained, better options exist
cwis-antivirus-malware-detected ; ss conflicts, resource intensive
cyclone-slider ; company deprecated, not maintained, better options exist (By Nico Amarilla / CodeFleet.net)
dante-framework ; theme-specific custom post types, serious errors, deprecated (By Swift Ideas)
database-browser ; not maintained, ss conflicts, creates intability, potential data loss
date-exclusion-seo-plugin ; not maintained, pointless
/db-cache/ ; deprecated
db-cache-reloaded ; not maintained
db-cache-reloaded-fix ; not maintained
dbc-backup ; ss conflicts, resource intensive, not maintained
dd-list-subpages ; no public docs, better options eixst
de-updraftplus-backup-exclude-image-thumbnails ; ss conflicts
default-to-gd ; deprecated (By Mike Schroder)
defensio-anti-spam ; not maintained
defensio-wordpress ; not maintained
defer-css-addon-for-bwp-minify ; ss conflicts
/debug/ ; ss conflicts
/debug-info/ ; ss conflicts
defender-security ; ss conflicts, bloated (by WPMU Dev)
degutenizer ; malware company (Pipdig)
/delete-all-comments/ ; deprecated, exploitable, potential data loss
delete-all-comments-of-website ; potential data loss
delightful-downloads ; deprecated, exploitable (By Ashley Rich)
designmodo-social-count ; deprecated, better options exist
desktopserver ; xml-rpc, ss conflicts
digg-digg ; deprecated
digiautolinks ; blackhat seo, bad idea
digiproveblog ; pointless
/digits/ ; creates instability, serious errors, resource intensive
disable-jquery-migrate ; exists in wp core (after version 5.5+)
disable-jquery-migrate-littlebizzy ; exists in wp core (after version 5.5+) By LittleBizzy
disable-real-mime-check ; exploitable, not maintained
disable-rss ; deprecated
/disable-site/ ; not maintained, better options exist
disable-woocommerce-reviews ; malware company (Pipdig)
disable-wordpress-updates ; ss conflicts, creates instability
disable-wp-emoji-icons ; ss conflicts
disabler ; better options available
disk-space-usage ; ss conflicts
display-html-sitemap ; bad practice (HTML sitemaps unnecessary)
display-php-version ; ss conflicts, not maintained, better options exist
/display-widgets/ ; active malware
displet-pop ; not maintained
divi-alt-text ; hacks third-party design products, no public changelog, bad practice (should not be theme-specific) By Yan Thiaudière
divi-booster ; bloated, serious errors, bad practice
divi-footer-editor ; hacks third-party design products
divi-overlays ; hacks third-party design products, no public changelog, bad practice (should not be theme-specific) By Divi Life / Tim Strifler
dnui-delete-not-used-image-wordpress ; serious errors, not maintained, potential data loss (By Nicearma)
do-shortcodes-for-rank-math-seo ; add-on to blacklisted plugin
domain-sharding ; deprecated
download-button-for-elementor ; hacks third-party design products, not maintained (By clicklabs Medienagentur)
dreamhost-panel-login.php ; vendor specific
dreamobjects ; vendor specific
/dropbox-backup/ ; deprecated (By WPAdm.com)
ds-divi-extras ; hacks third-party design products
dts-simple-share ; not maintained
dukapress ; exploitable
duplicate-page ; exploitable, ss conflicts (Gutenberg), better options exist
/duplicate-post/ ; spamware (acquired by Yoast), bloated, better options exist (By Enrico Battocchi & Team Yoast)
dvk-social-sharing ; not maintained
dw-social-share ; not maintained
dynamic-related-posts ; resource intensive
dynamic-widgets ; ridiculous
easy-googles-widget ; deprecated
easy-hide-login ; ss conflicts, creates instability
easy-html-sitemap ; bad practice (HTML sitemaps unnecessary)
easy-image-sizes ; not maintained, pointless, creates instability
easy-sitemap-page ; not maintained, bad practice (HTML sitemaps unnecessary)
/easy-social-share-buttons/ ; excessive logging
easy-social-share-buttons-for-wordpress ; bloated, excessive logging
/easy-social-sharing/ ; excessive logging
easy-text-links ; blackhat seo
easy-theme-and-plugin-upgrades ; creates instability
easy-webmaster-tools ; deprecated, pointless
easy-wp-smtp ; blacklist risk (smtp)
easyalttext ; not maintained, pointless (By Rasmus Nørskov (RHNorskov))
easy2map ; exploitable (per WOrdfence), deprecated (ak.a. wp-easy2map)
Ebor-Framework ; deprecated, poor maintenance, no public changelog (By Tom Rhodes)
ebor-framework ; deprecated, poor maintenance, no public changelog (By Tom Rhodes)
eborframework ; deprecated, poor maintenance, no public changelog (By Tom Rhodes)
ebor-page-builder ; deprecated (By TommusRhodus) based on aqua-page-builder
echbay-admin-security ; ss conflicts, pointless
ecommerce-store-optimizer ; vendor specific (By StudioPress / WP Engine)
edgemesh ; ss conflicts, bloated, pointless, bad practice (tries to overrule server cache rules)
/edit-flow/ ; abandoned (by Automattic)
ele-custom-skin ; hacks third-party design products (By Dudaster.com)
elegant-themes-support ; exploitable
elementor-extras ; hacks third-party design products (By Namogo)
elementskit ; hacks third-party design products (By Wpmet)
elementskit-lite ; hacks third-party design products (By Wpmet)
elementskit-pro ; hacks third-party design products (By Wpmet)
elfsight-instagram ; serious errors, resource intensive, database thrashing, poor coding, no public docs
elfsight-instagram-feed-cc ; serious errors, resource intensive, database thrashing, poor coding, no public docs
email-customizer-woocommerce ; serious errors, not maintained
emoji-settings ; ss conflicts
emoji-shortcode ; bloated, not maintained
emojics-wp ; bloated
enable-shortcode-and-php-support-in-text-widget ; deprecated, bad practice
enable-gzip-compression ; ss conflicts (apache)
enhanced-custom-permalinks ; creates instability, potential seo penalties, bad practice, not maintained
envato-wordpress-toolkit ; deprecated
eps-301-redirects ; exploitable, history of poor coding, excessive logging, better options exist (by WebFactory Ltd)
error-log-monitor ; ss conflicts
error-log-viewer ; ss conflicts
essential-addons-elementor ; hacks third-party design products (By WPDeveloper)
essential-addons-for-elementor ; bloated, hacks third-party design products (By WPDeveloper)
essential-addons-for-elementor-lite ; bloated, hacks third-party design products (By WPDeveloper)
essential-addons-for-elementor-pro ; bloated, hacks third-party design products (By WPDeveloper)
essential-blocks ; illegal email spam, selling private data, bloated, hacks third-party design products (By WPDeveloper)
et-safe-mode ; ss conflicts, creates instability, exploitable (Elegant Themes)
evolution-google-analytics-code ; not maintained
execution-time ; php hacks
expandable-row-for-beaver-builder ; hacks third-party design products (by Brainstorm Force)
/expander/ ; deprecated (By Ciprian Popescu)
exploit-scanner ; not maintained
export-all-urls ; malware, resource intensive, not maintained
exec-php ; php hacks
/expander/ ; not maintained, deprecated (by Ciprian Popescu)
extend-bundle-widgets ; not maintained, no public docs, possibly exploitable
extended-categories-widget ; not maintained, creates instability
ewww-image-optimizer ; bloated, resource intensive, generates junk files
ewww-image-optimizer-cloud ;
ezpz-one-click-backup ; deprecated, ss conflicts, resource intensive
facebook-for-woocommerce ; serious errors, history of poor coding (By Facebook via WooCommerce.com)
facebook-google-twitter-share ; not maintained
facebook-like-box ; deprecated (by Marcos Esperon)
facebook-like-button ; deprecated
/falcon/ ; ss conflicts
fancier-author-box ; not maintained (by ThematoSoup)
/fancy-box/ ; not maintained
faq-schema-block-to-accordion ; blacklisted dependent plugin
fast-easy-social-sharing ; not maintained
fast-indexing-api ; pointless and add-on to blacklisted plugin (By Rank Math)
fast-user-switching ; not maintained, exploitable, creates instability, creates junk files (cookies, SQL) (By Tikweb)
fast-velocity-minify ; ss conflicts
fast-wp ; not maintained, ss conflicts
/favorite-post/ ; serious errors, not maintained (by Tareq Hasan)
fb-instant-articles ; poor coding, serious errors, not maintained (by Facebook and Automattic)
/fb-messenger/ ; deprecated
featherlight-html-minify ; ss conflicts
/feature-policy/ ; ss conflicts (by Google)
featured-image-admin-thumb-fiat ; wp core hacks, poor coding, resource intensive, bad practice
feedburner-email-subscription ; deprecated
feedburner-setting ; deprecated (By Jiayu (James) Ji)
file-away ; creates instability, not maintained
file-changes-monitor ; resource intensive, excessive logging, pointless (by nicolly)
filebird ; creates instability, potential data loss (By Ninja Team)
filebrowser ; deprecated
/flare/ ; serious errors, not maintained (By dtelepathy)
flexible-shipping-pro ; fatal errors, poor coding (by WP Desk)
floating-social-media-icon ; bloated, bad practice, spammy, hijacks WP Admin
fluid-video-embeds ; deprecated (By jamie3d)
flying-pages ; resource intensive, better options exist
follow-subscribe ; not maintained
font-awesome-4-menus ; not maintained, deprecated, better options exist
/fonts/ ; bad practice, creates instability; several conflicts with page builders etc
footer-javascript ; not maintained, creates instability
force-ssl-everywhere ; not maintained
/frame-buster/ ; ss conflicts, not maintained (by Warfare Plugins)
free-social-media-with-whatsapp ; not maintained
freshizer ; not maintained, generates junk files (image optimization)
full-screen-menu-for-elementor ; hacks third-party design products
full-site-editing ; ss conflicts, not ready for production sites (Gutenberg full site editing)
fuzzy-seo-booster ; thrashing
g1-socials ; deprecated, no public changelog (By bringthepixel)
g-file-merge-minify ; ss conflicts
g-meta-keywords ; bad practice (keyword stuffing), not maintained (By Sinan Yorulmaz)
/ga-in/ ; bloated, better options exist (copycat by IntelligenceWP)
gator-cache ; ss conflicts
genesis-favicon-uploader ; not maintained, hacks third-party design products
genesis-featured-page-extras ; not maintained, hacks third-party design products (By David Decker)
genesis-layout-extras ; not maintained, hacks other vendor design products (By David Decker / DECKERWEB)
getbowtied-tools ; vendor specific
giphypress ; serious errors, not maintained
global-site-tag-tracking ; better options exist
glue-for-yoast-seo-amp ; soon to be deprecated (By Yoast SEO)
gmail-smtp ; blacklist risk (smtp)
gna-google-analytics ; not maintained
go_pricing ; serious errors, abandoned (by Granth Web)
godaddy ; vendor specific
google-1-shortcodes ; deprecated
google-adwords-remarketing ; deprecated
google-analyticator ; serious errors, history of poor code, poor maintenance, better options exist (By SumoMe)
google-analytics-dashboard-for-wp ; spammy, bloated, serious conflicts, poor coding, tracking, spamware (acquired by WPBeginner)
google-analytics-for-mymail ; not maintained
google-analytics-for-wordpress ; spyware, history of spam/hijacking WP Admin, history of poor code, bloated (Monster Insights)
google-analytics-post-pageviews ; pointless
google-author-link ; deprecated
google-authorship ; deprecated
/google-captcha/ ; scamware, dashboard hijacking, better options exist (BestWebSoft)
google-comments ; deprecated
google-content-experiments ; not maintained, pointless
google-for-page ; deprecated
google-importer ; deprecated
google-language-translator ; exploitable, not maintained, pointless
google-listings-and-ads ; Jetpack honeypot, Automattic propaganda, not necessary to setup Google Merchant center, horrible design, absolutely pointless
google-page-badge ; deprecated
google-per-page-tracking-code ; deprecated (a.k.a. Awords Tracking Code)
google-plus-author ; deprecated
google-plus-authorship ; deprecated (By Martin Lazarov)
google-plus-badge ; deprecated
google-plus-badge-widget ; deprecated, spyware company, poor coding, serious errors, better options exist (MyThemeShop)
google-plus-comments ; deprecated
google-plus-google ; deprecated
google-plus-name-link-popup-badge ; deprecated
google-plus-page-badge ; deprecated
google-plus-share-and-plusone-button ; deprecated
google-plus-stream-for-wordpress ; deprecated
google-plus-stream-widget-plugin-for-wordpress ; deprecated
google-plus-widget ; deprecated
google-privacy-policy ; not maintained
google-publisher ; deprecated
google-site-kit ; bloated, excessive API calls (by Google)
google-site-verification-using-meta-tag ; bad practice, not maintained
google-webfont-optimizer ; not maintained
/googleanalytics/ ; poor maintenance, bloated, excessive API calls, better options exist, spyware (By ShareThis)
googleplus-multi-authorship ; deprecated
gonzales ; ss conflicts
gosquared ; bloated, excessive api calls
gosquared-official ; bloated, excessive api calls, excessive logging
gosquared-wordpress-plugin ; deprecated
/gp/ ; deprecated
gpltimes ; seems to cause spinning/thrashing (also, secretive plugin repo that does not disclose ownership) ... might enable again later
gppro-export-css ; not maintained
gplus-author-profile ; deprecated
graceful-pull-quotes ; deprecated (by By Stephen Rider)
gravatar-widget ; deprecated
gravatarlocalcache ; not maintained
gregs-high-performance-seo ; not maintained
grisha-gplus-gallery ; deprecated
growmap-anti-spambot-plugin ; deprecated
gumlet ; ss conflicts
gunner-technology-authorship ; deprecated
/gutenberg/ ; ss conflicts, bloated
gwconditionalpricing ; deprecated (bundled into Gravity Perks plugin)
gwtermsofservice ; deprecated (bundled into Gravity Perks plugin)
gzip-ninja-speed-compression ; deprecated
/hammy/ ; not maintained, better options exist
hc-custom-wp-admin-url ; not maintained, ss conflicts, poor coding, serious errors
header-and-footer-scripts ; poor maintenance, poor code, better options exist
header-footer-elementor ; hacks third-party design products
headers-security-advanced-hsts-wp ; ss conflicts, also better to manipulate headers via Cloudflare
health-check ; pointless, creates instability, history of poor coding, potential data loss, now included in wp core
heartbeat-control ; ss conflicts
hello-dolly ; pointless
heroic-social-widget ; not maintained
hide-jetpack-promotions ; dependency blacklisted
hide-login-page ; ss conflicts, creates instability
hide_my_wp ; ss conflicts, creates instability, deprecated (By AUB Media)
hide-my-wp ; ss conflicts, creates instability
hide-wp-urls ; ss conflicts, creates instability
hierarchical-html-sitemap ; bad practice (HTML sitemaps unnecessary)
hitsteps-visitor-manager ; bloated, excessive api calls
holler-box ; serious errors, resource intensive, admin-ajax abuse, not maintained
host-analyticsjs-local ; pointless, creates instability (caos analytics)
host-webfonts-local ; pointless, creates instability (caos web fonts)
hostinger ; vendor specific
/hsts-ready/ ; ss conflicts, unclear purpose
htaccess ; ss no support (apache)
html-javascript-adder ; exploitable, bad practice (adds Flash, etc) ...(by Aakash Chakravarthy)
/html-minify/ ; ss conflicts, not maintained
html-sitemap ; bad practice (HTML sitemaps unnecessary)
html-sikistir-basit-html-sikistirici ; ss conflicts
http-headers ; ss conflicts
https-image-fixer ; not maintained, better options exist
https-redirection ; ss conflicts (By Tips and Tricks HQ)
hyper-cache ; ss conflicts
hyper-cache-extended ; ss conflicts
hyperdb ; ss conflicts
icon-moon-font-add ; no public changelog
iire-social-icons ; not maintained
imagefocuspoint ; not maintained
imagemagick-engine ; ss conflicts
images-lazyload-and-slideshow ; not maintained
image-optimizer-for-google-lighthouse ; deprecated
image-optimizer-wd ; resource intensive, creates database junk
image-optimization ; potential data loss, bad practice, resource intensive
resize-image-after-upload ; feature exists in WP Core, acquired by ShortPixel to spam (by ShortPixel)
/image-widget/ ; exists in wp core, not maintained
imagify ; generates junk files
import-xml-csv-settings-to-rank-math-seo ; add-on to blacklisted plugin
improve-pagespeed-today ; ss conflicts
improved-variable-product-attributes ; bloated, serious errors, bad practice (By XforWooCommerce)
inactive-user-deleter ; data loss
inboundio-marketing ; exploitable
/infogram/ ; pointless
index-autoload ; ss conflicts
index-autoload-littlebizzy ; ss conflicts
/infolinks/ ; not maintained
inline-html-css-javascript-minifier ; ss conflicts
insert-google-analytics-tracking-code ; not maintained
insert-php ; php hacks
inspectlet-heatmaps-and-user-session-recording ; abandoned, utility
instant-feedback ; bloated, not maintained
instant-gzip-compression ; ss conflicts (apache)
/intelligence/ ; excessive API calls, bloated, bad practice (using WP Admin as analytics dashboard) (by LevelTen)
intuitive-custom-post-order ; resource intensive, creates instability
ip-blacklist-cloud ; not maintained, ss conflicts, resource intensive
ip-geo-block ; bloated, excessive logging
iq-block-country ; bloated, excessive logging, bad practice (should be done at DNS level these days) By Pascal / Webence
ithemes-sync ; ss conflicts
itr-popup ; not maintained
itro-popup ; not maintained
iwp-client ; ss conflicts, creates instability (remote managers)
jamie-social-icons ; not maintained
jawn-alp ; previously zox-alp
jch-optimize ; ss conflicts
jet-blocks ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-blog ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-booking ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-compare-wishlist ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-elements ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-engine ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-menu ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-popup ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-reviews ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-search ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-smart-filters ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-style-manager ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-tabs ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-theme-core ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-tricks ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jet-woobuilder ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jetappointment ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jetgridbuilder ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jetformbuilder ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jetproductgallery ; serious errors, no public changelog, hacks third party design products (By Crocoblock)
jetpack ; bloated
jm-live-blog ; not maintained, resource intensive
jonimo-simple-redirect ; not maintained, better options exist (by Jonimo ?? anonymous)
jquery-image-lazy-loading ; not maintained
jr-referrer ; deprecated, exploitable
js-css-script-optimizer ; creates instability
js_composer_theme ; modified (nulled?) version of WP Bakery
js-composer-qtranslate-x ; not maintained, database thrashing
jsm-force-ssl ; better options exist
jumpple ; active malware (Sweet Captcha plugin under new name)
just-image-optimizer ; creates junk files
kd-google-plus-badge ; deprecated
kn-social-slide ; not maintained
kocuj-sitemap ; bad practice (HTML sitemaps unnecessary)
kv-send-email-from-admin ; not maintained, bad practice
last-modified-timestamp ; ss conflicts
/launcher/ ; spyware company, poor coding, serious errors, better options exist (MyThemeShop)
laravel-dd ; ss conflicts, not maintained
LayerSlider ; bloated, error prone, history of poor code, exploitable
/lazy-load/ ; not maintained
lazy-widget-loader ; not maintained
ldw-clean ; not maintained
/leadpages/ ; database thrashing, deprecated, creates instability, no public changelog, bad practice (new version but same folder name? impossible to know version?)
leverage-browser-caching ; ss conflicts, bad practice (By Rinku Yadav)
lh-sitemaps ; bad practice (HTML sitemaps unnecessary)
/lightbox-gallery/ ; serious errors, poor coding, not maintained (Lightbox Gallery by Hiroaki Miyashita)
lightboxkiller ; not maintained, no public docs
lightweight-html-minify ; ss conflicts
/likes/ ; bloated, no public docs
/limit-attempts/ ; ss conflicts, resource intensive
limit-heartbeat ; ss conflicts
limit-heartbeat-littlebizzy ; ss conflicts
limit-login-attempts ; not maintained, excessive logging
limit-login-attempts-reloaded ; excessive logging, ss conflicts
link-first-image-to-post ; malware company (Pipdig)
link-to-telegram ; abandoned
link-to-url-post ; not maintained, bizarre code
linkman ; blackhat seo, deprecated
linkpatrol ; resource intensive, no public changelog
litespeed-cache ; ss conflicts (litespeed)
live-weather-station ; pointless, resource intensive
loading-page ; bloated, bad idea
local-emoji ; pointless, ss conflicts
loco-translate ; pointless, creates instability, potential data loss
logbook ; excessive logging
login-lockdown ; excessive logging
login-recaptcha ; pointless, bloated, ss conflicts (By Robert Peake)
login-security-solution ; creates instability, excessive logging, not maintained
login-wall ; exploitable
loginizer ; ss conflicts
loginpress ; bloated, exploitable, bad practice (e.g. requires license for login page to work), hijacks wp core (By WPBrigade)
loginwall-for-wp-beta ; exploitable
/log-viewer/ ; ss conflicts
luminpop ; deprecated (a.k.a. Lumin Popover by Lumin Apps)
/machete/ ; ss conflicts
/mailchimp/ ; deprecated, political censorship
mailchimp-for-woocommerce ; serious errors, resource intensive, poor coding, better options exist, political censorship
mailchimp-forms-by-mailmunch ; spyware, political censorship, bloated (By Mailmunch)
mailster-multi-smtp ; blacklist risk (smtp)
/maintenance-mode/ ; ss conflicts
mainwp ; ss conflicts, creates instability (MainWP)
mainwp-child ; ss conflicts, creates instability (MainWP)
manual-image-crop ; cant remember why
mashshare-fblikebar ; bloated, third-party cookies (By René Hermenau)
mashshare-google-analytic ; pointless
mashshare-pageviews ; excessive logging, resource intensive (By René Hermenau)
mashshare-likeaftershare ; bloated, third-party cookies (By René Hermenau)
maven-algolia ; not maintained
mavis-https-to-http-redirect ; bad idea, not maintained
max-file-size ; php hacks
maxblogpress-subscribers-magnet ; deprecated (a.k.a. sbmg)
mayo-login-screen ; hijacks wp core, bad practice, creates instability, not maintained (By Passion In Design)
mc-w3tc-minify-helper ; ss conflicts
mcafee-secure ; ss conflicts, copyright issues, pointless
media-file-manager ; creates instability, no public docs
media-file-renamer ; creates instability, resource intensive, bad practice
media-from-ftp ; bad practice (caters to poorly configured servers, risks conflict with wp core) By Katsushi Kawamori
/memcached/ ; ss conflicts
merge-minify-refresh ; ss conflicts
merge-minify-refresh-clear-caches ; ss conflicts
meta-generator-and-version-info-remover ; ss conflicts, bizarre code
meta-tag-manager ; pointless, not maintained
metronet-embed-google-plus ; deprecated
metronet-reorder-posts ; creates instability, potential data loss, resource intensive
micropoll ; not maintained
migrate-guru ; vendor specific
mihan-wp-cache ; ss conflicts
mime-types-plus ; ss conflicts, exploitable, pointless
minify-html ; ss conflicts
minify-html-littlebizzy ; ss conflicts
minimal-coming-soon-maintenance-mode ; exploitable, political censorship (only accepts MailChimp), history of poor code (by WebFactory)
miniorange-2-factor-authentication ; no public changelog, poor coding
miniorange-2-factor-authentication-premium ; no public changelog, poor coding
miniorange-limit-login-attempts ; excessive logging
miwoftp ; exploitable
mixpanel-integration ; not maintained
mobius-conversion-tracker ; not maintained
mojo-marketplace-wp-plugin ; vendor specific
monsterinsights-performance ; excessive logging
moon-phases ; not maintained (Joe's Web Tools)
mouseflow-for-wordpress ; bloated, excessive api calls, bad practice (login to their site instead) by Mouseflow
/mp6/ ; deprecated, exists in wp core
mts-url-shortener ; spyware company, poor coding, serious errors, better options exist (MyThemeShop)
multi-google-analytics ; bloated, not maintained, bad practice
multipurpose-sliders ; deprecated, serious errors, no public docs (a.k.a. iWorks Sliders by Marcin Pietrzak)
my-custom-css ; serious errors, not maintained, better options exist
my-custom-functions ; ss conflicts (alternative one exists as MU plugin already), bad practice (PHP functions should not be stored as SQL queries) By Space X-Chimp
my-database-admin ; bad practice, creates instability, likely exploitable
my-simple-space ; ss conflicts
my-smtp-wp ; blacklist risk (smtp)
my-wp-backup ; ss conflicts, spyware company, poor coding, serious errors, better options exist (MyThemeShop)
my-wp-fast ; ss conflicts
my-wp-translate ; spyware company, poor coding, serious errors, better options exist (MyThemeShop)
mycurator ; pointless, spammy, bad practice, resource intensive
mymail-multi-smtp ; blacklist risk (smtp)
myreviewplugin ; deprecated
mythemeshop-connect ; spyware company, serious errors, poor coding, extortion ware, better options exist (MyThemeShop)
mythemeshop-theme-customizer ; spyware company, serious errors, poor coding, better options exist (MyThemeShop)
mywebtonet-performancestats ; resource intensive
native-lazyload ; serious errors, creates instability, experimental software (By Google)
native-emoji ; bloated
nazy-load ; creates instability (overwrites paths), ss conflicts (By Gijo Varghese)
nc-extendify-lc ; vendor specific
new-google-plus-badge ; deprecated
new-google-plus-badge-widget ; deprecated
news-ticker-tj ; not maintained, serious errors
newstatpress ; excessive logging, resource intensive
nginx-cache-optimizer ; ss conflicts
nginx-champuru ; ss conflicts
nginx-compatibility ; ss conflicts, not maintained
nginx-helper ; ss conflicts
nginx-mobile-theme ; ss conflicts
nifty-backups ; unsafe local archives, resource intensive, not maintained (By NickDuncan)
nitropack ;; ss conflicts, bloated
nm404 ; creates instability
no-external-links ; pointless
no-revisions ; not maintained, pointless (after WP 4.x)
no-self-ping ; ss conflicts
/nofollow/ ; serious errors, creates instability, not maintained
nofollow-for-external-link ; bad practice, not maintained, serious errors
nxs-snap-pro-upgrade ; serious errors, no longer relevant (NextScripts: SNAP Pro Upgrade Helper)
o3-social-share ; not maintained
ocean-elementor-widgets ; hacks third-party design products (By OceanWP)
odihost-easy-redirect-301 ; not maintained, potential serious errors (does not remove data on deactivation)
official-facebook-pixel ; serious errors, history of poor coding, better options exist (Official Facebook Pixel via GitHub)
ol_scrapes ; blackhat seo, copyright issues, no public docs
one-click-child-theme ; deprecated
onesignal-free-web-push-notifications ; spyware, history of exploits, bad for reputation, soon blocked by default in Chrome/Firefox/etc
onlywire ; idk
onlywire-bookmark-share-button ; not maintained, serious errors
/opcache/ ; ss conflicts, not maintained
optimize-javascript ; ss conflicts
optimize-scripts-styles ; ss conflicts
optimizely ; not maintained
optimizely-x ; not maintained
optimizemember ; alt spelling
optimizeMember ; requires OptimizePress (banned)
optimizepress ; bloated, serious errors, creates instability, potential data loss
optimizePressPlugin ; bloated, serious errors, creates instability, potential data loss
optimizePress ; bloated, serious errors, creates instability, potential data loss
optimole-wp ; excessive api calls, bloated
optimus ; resource intensive, poor coding
optinmonster ; bloated, cronyism, dashboard spam, etc (By Awesome Motive)
/options-manager/ ; not maintained
outtatimr ; deprecated
/oxygen/ ; creates instability, content lock-in, theme-specific page builder, hijacks wp core
p3-profiler ; not maintained, serious errors
page-bundle ; database thrashing, no public changelog (By Pablo Cruz Digital)
page-links-to ; not maintained, poorly coded, bad practice (redirects should not conflict with permalink system/database)
page-or-post-clone ; not maintained, better options exist
page-sitemap ; not maintained, bad practice (HTML sitemaps unnecessary)
page-speed ; ss conflicts, not maintained
page-tagger ; not maintained, pointless
page-views-count ; excessive logging
pagefrog ; not maintained
pageloader-by-bonfire ; bad practice
/pageviews/ ; pointless, resource intensive
pantheon-advanced-page-cache ; vendor specific
parallelize-downloads ; deprecated
parallel-loading-system ; deprecated
parrallelize ; deprecated
PartnerPal ; poor coding, not maintained, no public docs (Google Tag Manager, etc)
pb-responsive-images ; not maintained
pc-google-analytics ; deprecated
pdf-viewer-for-wordpress ; not maintained (ThemeNcode)
pdf-viewer-for-wordpress-visual-composer-addon ; not maintained (ThemeNcode)
pegasaas ; ss conflicts
pegasaas-accelerator-wp ; ss conflicts
per-page-add-to ; bad practice, not maintained, creates instability
perfectdashboard ; ss conflicts, bad practice
perfmatters ; bloated, stolen code, ss conflicts
performance-optimization-order-styles-and-javascript ; not maintained
performance-tester ; not maintained, resource intensive
permalink-finder ; creates instability, bad practice
permalink-manager ; creates instability, bad practice (overwrites permalinks in database even when disabled) By Maciej Bis
permalink-manager-pro ; creates instability, bad practice (overwrites permalinks in database even when disabled) By Maciej Bis
permalink-modifier ; deprecated, exists in wp core already
performance-lab ; not suitable for production sites
peters-literal-comments ; not maintained, possible database thrashing (By Peter Keung)
peters-login-redirect ; exploitable, bad practice (By Peter Keung)
phastpress ; ss conflicts
photo-express-for-google ; deprecated
photomix ; resource intensive
php-code-for-posts ; deprecated, php hacks
php-code-widget ; php hacks
php-settings ; php hacks
php-text-widget ; php hacks, not maintained
phpmyadmin ; exploitable, creates instability
picasa-express-x2 ; deprecated
piio-image-optimization ; bloated, creates junk files
pilotpress ; serious errors, poor coding (By Ontraport)
pinterest-pin-it-button ; not maintained (by Phil Derksen)