CSS & JavaScript Toolbox

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 66% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

16 of the last 25 four- and five-star reviews came from accounts created within a month of posting the review, and 11 of those landed between 2018-04-23 and 2018-05-07.

Registering a wp.org account just to leave a review is common and often entirely legitimate. The share here is unusually high for the sample, so it's worth keeping in mind while reading the reviews.

1. ★★★★★ joshuarg007

   4.3y ago

   Great plugin! This topic was modified 4 years, 1 month ago by joshuarg007. This topic was modified 4 years, 1 month ago by joshuarg007.

   Read on wp.org ↗
2. ★★★★★ ads

   4.7y ago

   Thank you. This topic was modified 4 years, 7 months ago by ads.

   Read on wp.org ↗
3. ★★★★★ cablop

   5.0y ago

   It is a good plugin for your average needs. It used to be much better in the past, but they removed features in the free version that other similar plugins still offer for free.

   Read on wp.org ↗
4. ★★★★★ Jayden Lawson

   6.4y ago

   I needed to get custom js code in the header on certain pages, this plugin enabled me to do that quickly – very happy!

   Read on wp.org ↗
5. ★★★★★ René Oberwald

   7.1y ago

   Thanks guys for the update, version 9 fixed a lot of the issues i had with PHP7. Also like the new color. Keep it up! 🙂

   Read on wp.org ↗
6. ★★★★★ lexopa

   8.0y ago

   This is one of the most unintuitive plugins you will run across. It uses non-Wordpress standard UI, it creates a load of tables in your DB (17 tables), it is completely bloated for its intended functionality. It gets 2 stars because it DOES work.

   Read on wp.org ↗
7. ★★★★★ nadeemdigicots

   8.2y ago

   Amazing plugin, best for customization.

   Read on wp.org ↗
8. ★★★★★ imanubhatt

   8.3y ago

   Just add your code, click on the “save” button and then see the changes. I’ve been able to customize my theme exactly the way I want it. I would definitely recommend this plugin to everyone. Just TRY it and you will absolutely love it.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 12.0.6 Security: Fixed sanitization vulnerability in Template Manager Security: Fixed sanitization vulnerability in Blocks Coupling controller Enhancement: Improved plugin security and stability 12.0.6
2. — Version 12.0.5 Fixed: Improved plugin security and stability 12.0.5
3. — Version 12.0.4 Fixed: Improved plugin security and stability 12.0.4
4. — Version 12.0.3 Security: Fixed path traversal vulnerability in controller routing Security: Added input validation to prevent arbitrary file inclusion Enhancement: Improved plugin security and stability 12.0.3
5. — Version 12.0.2 Fix: Text domain header issue Fix: Old PHP notices and warnings Enhancement: Improved plugin stability 12.0.2
6. — Version 12.0.1 Fix: Headers already sent issue Fix: Old PHP notices and warnings Enhancement: Improved plugin stability 12.0.1

4 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.4 CSS & JavaScript Toolbox <= 12.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-10-31 CVE-2025-11928 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 12.0.5 Patched in 12.0.6
2. High · 7.5 CSS & JavaScript Toolbox < 12.0.3 - Authenticated (Subscriber+) Local File Inclusion ↗
   2025-07-22 CVE-2025-3703 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects < 12.0.3 Patched in 12.0.3
3. Medium · 6.4 CSS & JavaScript Toolbox <= 11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode ↗
   2023-12-19 CVE-2023-50823 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 11.8 Patched in 11.9
4. Medium · 5.8 CSS & JavaScript Toolbox <= 8.4.1 - Information Exposure ↗
   2018-12-08 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 8.4.1 Patched in 8.4.2

Automated install-time checks, tested on PHP 8.1.12 · WP 6.9

Translated into 3 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Code Snippets 1M+ installs · 4.7★ · 3 shared tags B
• Shortcoder — Create Shortcodes for Anything 100K+ installs · 4.8★ · 3 shared tags A
• WebberZone Snippetz – Header, Body and Footer manager 2K+ installs · 4.3★ · 3 shared tags A
• Code Engine – PHP Snippets, AI Functions & Automation for WordPress 800+ installs · 4.4★ · 3 shared tags A
• S SyntaxHighlighter Plus 100+ installs · 4.0★ · 3 shared tags D
• Safe PHP Code Widget 90+ installs · 3.6★ · 3 shared tags D

Embed this report card

Drop a live Pulse card for CSS & JavaScript Toolbox into a readme, a review or a deck. It updates itself.

CSS & JavaScript Toolbox: 10K+ active installs, 4.8★ (84 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/css-javascript-toolbox