Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 52% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ sean10234

   5mo ago

   so now you get 1 star review for that irritation

   Read on wp.org ↗
2. ★★★★★ xoruna

   6mo ago

   Works nicely, thanks.

   Read on wp.org ↗
3. ★★★★★ Matt Knowles

   6mo ago

   Used this to replace another plugin that hadn’t been updated and stopped working with PHP 8. While this plugin works differently, I actually prefer this method.

   Read on wp.org ↗
4. ★★★★★ Anonymous

   8mo ago

   Una de las herramientas indispensables en cualquier sitio Web.

   Read on wp.org ↗
5. ★★★★★ dopernik

   9mo ago

   Со своими функциями справляется. Плагин ни разу не подводил !

   Read on wp.org ↗
6. ★★★★★ cybereve

   9mo ago

   Utilisée depuis de nombreuses années, je n’ai pas eu de problèmes avec . Super ! Je ne mets pas 5 étoiles car je ne sais pas au niveau du support n’ayant pas eu besoin de les joindre/ Merci This topic was modified 7 months, 1 week ago by cybereve.

   Read on wp.org ↗
7. ★★★★★ doyenwilliams

   9mo ago

   10 out if 10 I recommend for inserting additional code into your pages, posts and templates

   Read on wp.org ↗
8. ★★★★★ denstl

   9mo ago

   I don’t need to add a lot of php code to my website. But would be lost without this add on. Works great.

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-07-22 Version 2.7.6 Fixed a PHP warning that could appear in server logs when the plugin checked incoming REST API requests. Fixed an issue where a snippet error message could be shown to site visitors instead of only to administrators. Upd 2.7.6
2. 2026-05-15 Version 2.7.5 Improved compatibility with PHP 8.1 Added display of actual PHP error message on the snippet error splash page 2.7.5
3. 2026-04-27 Version 2.7.4 Fixed error caused by dependencies 2.7.4
4. 2026-04-23 Version 2.7.3 Added an option to disable the Active Snippets notice from the menu Fixed issue with tags area is not visible unless you enable/disable it from Screen Options Fixed issue with text snippets paragraph formatting when rend 2.7.3
5. 2026-01-27 Version 2.7.2 This release focuses on improving the security and robustness of snippet type handling in the codebase. 2.7.2
6. 2026-01-21 Version 2.7.1 Added a compatibility check for the Woody Pro version during activation to prevent fatal errors. 2.7.1

8 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 8.8 Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts <= 2.7.1 - Authenticated (Contributor+) Remote Code Execution ↗
   2026-03-23 CVE-2026-25366 Improper Control of Generation of Code ('Code Injection') Affects <= 2.7.1 Patched in 2.7.2
2. Critical · 9.9 Woody code snippets – Insert Header Footer Code, AdSense Ads <= 2.5.0 -Authenticated (Contributor+) Remote Code Execution ↗
   2024-06-14 CVE-2024-3105 Improper Control of Generation of Code ('Code Injection') Affects <= 2.5.0 Patched in 2.5.1
3. Medium · 4.4 Woody code snippets – Insert Header Footer Code, AdSense Ads <= 2.5.0 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2024-06-06 CVE-2024-35751 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.0 Patched in 2.5.1
4. Medium · 6.1 Woody code snippets <= 2.4.5 - Reflected Cross-Site Scripting ↗
   2022-06-02 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.5 Patched in 2.4.6
5. Medium · 4.3 Woody code snippets <= 2.3.9 - Cross-Site Request Forgery Bypass ↗
   2020-09-16 CVE-2020-36759 Cross-Site Request Forgery (CSRF) Affects < 2.3.10 Patched in 2.3.10
6. Medium · 6.4 Woody Ad Snippets <= 2.2.8 - Authenticated Cross-Site Scripting ↗
   2019-09-13 CVE-2019-16289 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.2.9 Patched in 2.2.9
7. High · 7.5 Woody Ad Snippets <= 2.2.5 - Arbitrary Post Deletion ↗
   2019-08-09 CVE-2019-14773 Improper Access Control Affects <= 2.2.5 Patched in 2.2.6
8. High · 8.8 Woody Ad Snippets <= 2.2.4 - Missing Authorization to Settings Import ↗
   2019-08-02 CVE-2019-15858 Missing Authorization Affects < 2.2.5 Patched in 2.2.5

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 6 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-01-03 70K+ → 60K+ down after 625 days in tier
2. 2024-04-18 80K+ → 70K+ down after 1 days in tier
3. 2024-04-17 70K+ → 80K+ up after 1 days in tier
4. 2024-04-16 80K+ → 70K+ down after 7 days in tier
5. 2024-04-09 70K+ → 80K+ up after 1 days in tier
6. 2024-04-08 80K+ → 70K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• FluentSnippets – High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code Manager 50K+ installs · 4.6★ · 4 shared tags A
• WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager 3M+ installs · 4.9★ · 2 shared tags A
• Code Snippets 1M+ installs · 4.7★ · 1 shared tag A
• Simple Custom CSS and JS 600K+ installs · 4.3★ · 1 shared tag A
• Insert Headers And Footers 300K+ installs · 4.9★ · 1 shared tag A
• PHP Compatibility Checker 200K+ installs · 2.8★ · 1 shared tag B

Embed this report card

Drop a live Pulse card for Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts into a readme, a review or a deck. It updates itself.

Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts: 60K+ active installs, 4.5★ (221 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/insert-php