Advanced iFrame

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 42% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ Toine Rademacher

   6mo ago

   What a horrible, clunky, and invasive plugin. Every wp-admin page refresh I get an admin notice that takes up half my screen and after a few seconds gets smaller with a weird animation. To get this notice gone, I have to opt in and share my data???? This is what it says:OPT-IN to get email notifications for security & feature updates and occasional offers. If you OPT-IN you will additionally get: Automatic removal of the small notice which is shown on the iframe Boxes in the administration remembers their state Additional sections on the help tab Exclusive coupons Isn’t this all against the WP.org policy? Stop irritating users just for them to share their data and for you to send marketing messages!!!

   Read on wp.org ↗
2. ★★★★★ Anonymous

   10mo ago

   Fast to install and grasp. Feature rich = future proof. We’re happy.

   Read on wp.org ↗
3. ★★★★★ Don Brady

   1.2y ago

   Used extensively with other apps in domain without hiccup. Been using for years and will continue to do so.

   Read on wp.org ↗
4. ★★★★★ oneredball

   2.2y ago

   Michael you made me save tons of time, thank you so much. This topic was modified 2 years ago by oneredball.

   Read on wp.org ↗
5. ★★★★★ sempervirentz

   2.9y ago

   embedded a python flask app with this plugin. Saved me so much work. Great plugin!

   Read on wp.org ↗
6. ★★★★★ winterstreet

   2.9y ago

   The plugin offers a lot of useful features for working with iframes, and the plugin developer was very helpful with trying to figure out a problem I was having. This topic was modified 2 years, 10 months ago by winterstreet.

   Read on wp.org ↗
7. ★★★★★ rjjacob

   3.9y ago

   I rely on this plugin to embed CRUD applications integrated with additional databases into WP and there is nothing else in the plugin repository that even comes close. Last week, when I had an issue after an update, Michael responded really fast with a workaround and within a couple of days, an update was released that fixed the issue permanently. Not that’s service!! Highly recommended.

   Read on wp.org ↗
8. ★★★★★ kinghill

   4.3y ago

   When it comes to including iFrames in your posts and pages, you’ll definitely want to use this great plugin. Plus, the developer is very friendly and quick to respond to questions in the forum. 5 stars.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2026.2 Security fix: additional_js could be used as contributor still in the Gutenberg block. Now also there “Stored Cross-Site Scripting via Gutenberg Block ‘additional’ Attribute” is closed. See: https://www.cve.org/CVERecord 2026.2
2. — Version 2026.1 New: Tested with WordPress 6.9.4 New: Updated Freemius to v2.13.1 2026.1
3. — Version 2026.0 Breaking change: Due to the security fix for “Add iframe URL as param” and “Prefix/id/urlrewrite for iframe URL,” the hash/hashrewrite needs to be set in both the administration AND the shortcode. Breaking change: The po 2026.0
4. — Version 2025.10 New: Tested with WordPress 6.9 New: Updated Freemius to v2.13.0 2025.10
5. — Version 2025.9 New: Tested with WordPress 6.8.3 New: Updated jQuery to v3.7.1 New: Updated Freemius to v2.12.2 New: Performance and memory optimizations. Fix: Deprecated utf8_encode was removed from the code. Fix: hide_part_of_iframe w 2025.9
6. — Version 2025.8 Fix: 2025.7 was overwriting the style attribute instead appending the border. This broke a couple of features which now work fine again. 2025.8

13 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 Advanced iFrame <= 2026.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block 'additional' Attribute ↗
   2026-07-07 CVE-2026-6742 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2026.1 Patched in 2026.2
2. Medium · 6.4 Advanced iFrame <= 2025.10 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-01-19 CVE-2026-25453 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2025.10 Patched in 2026.0
3. Medium · 5.4 Advanced iFrame <= 2025.6 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-08-15 CVE-2025-8089 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2025.6 Patched in 2025.7
4. Medium · 6.4 Advanced iFrame <= 2025.5 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-07-25 CVE-2025-6987 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2025.5 Patched in 2025.6
5. Medium · 6.4 Advanced iFrame <= 2024.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header ↗
   2025-03-25 CVE-2025-1439 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2024.5 Patched in 2025.0
6. Medium · 6.4 Advanced iFrame <= 2025.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-03-25 CVE-2025-1437 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2025.2 Patched in 2025.3
7. Medium · 5.3 Advanced iFrame <= 2024.5 - Unauthenticated Settings Update ↗
   2025-03-25 CVE-2025-1440 Improper Input Validation Affects <= 2024.5 Patched in 2025.0
8. Medium · 6.4 Advanced iFrame <= 2024.3 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-05-22 CVE-2024-4365 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2024.3 Patched in 2024.4
9. Medium · 6.4 Advanced iFrame <= 2024.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2024-04-11 CVE-2024-32079 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2024.2 Patched in 2024.3
10. Medium · 4.9 Advanced iFrame <= 2024.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-02-28 CVE-2024-1341 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2024.1 Patched in 2024.2
11. Medium · 6.4 Advanced iFrame <= 2023.10 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-01-31 CVE-2023-7069 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2023.10 Patched in 2024.0
12. Medium · 6.4 Advanced iFrame <= 2023.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2023-11-09 CVE-2023-4775 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2023.8 Patched in 2023.9
13. Medium · 6.1 Advanced iFrame <= 2021.9 Reflected Cross-Site Scripting ↗
    2022-02-02 CVE-2021-24953 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2021.9 Patched in 2022

Automated install-time checks, tested on PHP 8.1.12 · WP 6.7.2

Translated into 43 languages, 0 at 90% or more

Plus 19 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-01-29 50K+ → 40K+ down after 426 days in tier
2. 2024-11-29 60K+ → 50K+ down after 572 days in tier
3. 2023-05-07 70K+ → 60K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• I iframe 60K+ installs · 4.3★ · 2 shared tags A
• I Insert Pages 30K+ installs · 4.6★ · 2 shared tags A
• Simple YouTube Embed 4K+ installs · 4.1★ · 2 shared tags B
• Spreaker Shortcode 4K+ installs · 3.8★ · 2 shared tags D
• Auto iFrame 3K+ installs · 3.7★ · 2 shared tags C
• Simple YouTube Responsive 3K+ installs · 4.5★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for Advanced iFrame into a readme, a review or a deck. It updates itself.

Advanced iFrame: 40K+ active installs, 4.4★ (54 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/advanced-iframe