Favorites

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 98% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ Mladen Gradev

   4mo ago

   Everyone loves to bookmark their favorite things. This plugin does a great job for that! Thank you!

   Read on wp.org ↗
2. ★★★★★ muhammadnan

   6mo ago

   The plugin works great. But from quite some time we’re getting wordfence saying this is highly vulnerable but we’re not getting any update of plugin from 8 months

   Read on wp.org ↗
3. ★★★★★ digitaloneagency

   1.3y ago

   Simple, lightweight, and works flawlessly. We styled the shortlist, added a clear button, and integrated it into a form — all without issues. Highly recommended — thanks for a great plugin!

   Read on wp.org ↗
4. ★★★★★ eickit

   1.5y ago

   The plugin met my needs exactly. It can be adapted really well to your own needs and it works. Many thanks to the author.

   Read on wp.org ↗
5. ★★★★★ NixXxon23

   1.9y ago

   Perfectly did the job. Lightweight, well documented, we need more plugins like this one.

   Read on wp.org ↗
6. ★★★★★ michaelw_dc

   2.1y ago

   Works quite well, and was adaptable to my needs. My only wish was for a JS API so that I could manually trigger adds & removals. I perused the plugin’s scripts and figured out how I could do it myself, and put it in for a custom listing interface (a menu item button that shows the user’s saved resources on click, and with additional controls to remove saved resources via JS).

   Read on wp.org ↗
7. ★★★★★ granatdesign

   2.5y ago

   I think this plugin is exactly what I’m looking for. Well done!

   Read on wp.org ↗
8. ★★★★★ styzer

   2.5y ago

   This plugin was a winner. But no more. Too bad. Two stars for the earlier success, 3 stars down for absence and silence. The plugin inserts text instead of a button (from the shortcode I suppose), so ALL my posts start with a BOLD F (for Favorited). No more buttons can be visible anymore. WP is now at version 6.4.3. I wish the developers all the best. They will be missed. Andre

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.3.7 Security Updates Translation updates 2.3.7
2. — Version 2.3.6 Adds filter to customize the “Clear Favorites” button text (favorites/clear_favorites_text) Adds filter to customize the “No Favorites” text in a list (favorites/no_favorites_text) 2.3.6
3. — Version 2.3.5 Security update 2.3.5
4. — Version 2.3.4 Tested with WordPress v6.4 Fixes various PHP errors Security update 2.3.4
5. — Version 2.3.3 Security update. 2.3.3
6. — Version 2.3.2 Security update. 2.3.2

4 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 8.1 Favorites <= 2.3.6 - Unauthenticated Local File Inclusion ↗
   2025-07-21 CVE-2025-60202 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 2.3.6 Patched in 2.3.7
2. Medium · 4.4 Favorites <= 2.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-03-04 CVE-2025-1452 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.3.4 Patched in 2.3.5
3. Medium · 6.4 Favorites <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2024-03-29 CVE-2024-2948 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.3.3 Patched in 2.3.4
4. Medium · 6.4 Favorites <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2023-05-30 CVE-2023-2304 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.3.2 Patched in 2.3.3

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 11 languages, 6 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2023-06-09 20K+ → 10K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Solid Post Likes 500+ installs · 4.3★ · 3 shared tags A
• D DBWD Bookmark Page 20+ installs · 3.7★ · 3 shared tags D
• CBX Bookmark & Favorite 1K+ installs · 4.4★ · 2 shared tags A
• My Favorites 1K+ installs · 4.5★ · 2 shared tags B
• Admin Bookmarks 500+ installs · 4.4★ · 2 shared tags A
• W WP likes 100+ installs · 4.1★ · 2 shared tags D

Embed this report card

Drop a live Pulse card for Favorites into a readme, a review or a deck. It updates itself.

Favorites: 10K+ active installs, 4.6★ (133 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/favorites