Best injections plugins for WordPress

The most popular injections plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Code Scanner leads with 10+ active installs, ahead of Block scripts A (10+). All 2 plugins tagged “injections” are below, with figures from WordPress.org that update every day.

Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.

Research this niche or see all plugins.

Top 2 injections plugins

1.
Code Scanner
The most installed injections plugin, with 10+ active installs. No reviews yet, last updated 7 years ago. Tested only up to WordPress 5.1.0.
2.
Block scripts A
10+ active installs. No reviews yet, last updated 8 years ago. Tested only up to WordPress 4.7.39.

All 2 plugins tagged “injections”

Code Scanner
#39,937
by Magda Sicknick7 years ago
Scans WordPress plugin, theme, and core directories for malicious code injections.
Installs
10+
Rating
–
Downloads
0/day
Block scripts A
Down in the last 7 days:7,840#45,555
by oleksandr878 years ago
A simple plugin that blocks external scripts, XSS, RFI, SQL injections
Installs
10+
Rating
–
Downloads
0/day