Kitgenix PluginScore helps you assess a WordPress.org plugin before installing it. It combines security, vulnerability history, maintenance, update activity, WordPress/PHP compatibility and other public signals into a clear health score. V3 adds stricter scoring, better vulnerability handling, automatic rescanning, score history foundations and improved PDF reports. Scores can’t be bought — even Kitgenix plugins are assessed by the same rules.
Hey Product Hunt 👋
We built Kitgenix PluginScore because choosing a WordPress plugin often involves piecing together information from multiple places.
WordPress.org gives you useful signals such as active installations, reviews, last updated dates, compatibility and support information, while vulnerability databases provide another part of the picture. But it can still be difficult to answer a simple question:
“Should I trust this plugin enough to install it on a production website?”
PluginScore brings those signals together and turns them into a clearer assessment of a plugin’s overall health.
With PluginScore V3, we’ve rebuilt much of the scoring and scanning system.
We now look at signals including:
• Known and unresolved vulnerabilities
• Historical vulnerability information
• How vulnerabilities were resolved
• Maintenance and development activity
• Update frequency
• Time since the last release
• WordPress compatibility
• PHP compatibility
• Active installations
• WordPress.org data
• Overall plugin health
One thing that was especially important to us was making the scoring stricter.
A plugin shouldn’t receive a great score simply because it has hundreds of thousands of installations or a well-known developer. Likewise, having had a vulnerability in the past shouldn’t automatically make a plugin unsafe today if the issue was handled responsibly and patched quickly.
PluginScore also automatically works through the WordPress.org plugin repository and periodically rescans existing results so scores don’t remain permanently based on stale information.
And importantly:
Plugin developers cannot pay for a better score.
That includes us. Kitgenix develops WordPress plugins ourselves, but our own plugins are assessed using exactly the same scoring rules as everyone else.
PluginScore isn’t intended to replace code reviews, professional security testing or human judgement, and a high score is never a guarantee that a plugin is vulnerability-free.
Instead, we’re trying to provide another useful layer between:
“I found this plugin.”
and
“I’m comfortable installing it.”
We’d especially love feedback from WordPress developers, agencies and site owners.
Try searching for a plugin you already know well and let us know:
Does the score feel fair?
If not, we’d genuinely like to know why. That feedback is probably the most useful thing we can get as we continue developing the scoring methodology.
Thanks for checking out Kitgenix PluginScore! 🚀