Custom Post Type Attachment

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 83% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

1. ★★★★★ RobinKMullins

   10.3y ago

   Quick and easy. I use it every day to post local court information which comes to me a pdf files. Sweet.

   Read on wp.org ↗
2. ★★★★★ ireneherz

   12.5y ago

   Nice little tool, once I figured out that you upload the files at the bottom of the page. May be a wee bit complicated for my client to figure out, so I’ll have to explain about shortcodes. It’s nice that the shortcodes are the same for each page, tho.

   Read on wp.org ↗
3. ★★★★★ aviplugins.com

   12.5y ago

   just install any use..

   Read on wp.org ↗

2 disclosed vulnerabilities on record for this plugin, 1 still affects the current version.

1. Medium · 6.4 Custom Post Type Attachment <= 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-09-29 CVE-2025-62907 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.4.6 No patch available
2. Medium · 6.4 Custom Post Type Attachment <= 3.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pdf_attachment Shortcode ↗
   2024-05-15 CVE-2024-4546 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.4.5 Patched in 3.4.6

Automated install-time checks, tested on PHP 8.1.12 · WP 6.5.3

Translated into 4 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-23 800+ → 700+ down after 9 days in tier
2. 2026-08-14 700+ → 800+ up after 1 days in tier
3. 2026-08-13 800+ → 700+ down after 114 days in tier
4. 2026-04-21 900+ → 800+ down after 116 days in tier
5. 2025-12-26 1K+ → 900+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Download Attachments 8K+ installs · 4.4★ · 3 shared tags A
• LH Copy Media File 800+ installs · 3.9★ · 3 shared tags D
• Iptanus File Upload 10K+ installs · 4.4★ · 2 shared tags A
• WP-DownloadManager 3K+ installs · 4.0★ · 2 shared tags B
• B Bulk Change Media Author 2K+ installs · 4.3★ · 2 shared tags D
• Pro Mime Types – Manage file media types 2K+ installs · 4.1★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for Custom Post Type Attachment into a readme, a review or a deck. It updates itself.

Custom Post Type Attachment: 700+ active installs, 5.0★ (3 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/custom-post-type-pdf-attachment