Plugin Pulse Beta
← Pulse
O

OptionTree

by Derek Herman · Uncategorized

Theme Options UI Builder for WordPress. A simple way to create & save Theme Options and Meta Boxes for free or premium themes.

Removed from WordPress.org

wp.org closed this plugin on 2026-09-03. It's no longer installable or updated. If you're running it, plan a replacement: closures are often security-related and WordPress won't warn you.

⚠ Stale⚠ Likely abandoned⚠ Open vulnerability

Health

D 49/100

Stale · Likely abandoned · Open vulnerability

Active installs

50K+

≈55K estimated

Momentum

+31%

downloads vs prior 30d

Biggest opportunity: “meta boxes”, “options” and “settings” aren't earning a slot. You list them, but you're not in the first 24 results for those searches. WordPress.org counts only your first five tags, so free the slot for a search you can win.

How scoring works →
49 Health · D
Maintenance 3/100
Rating quality 90/100
Support 70/100
Security 40/100

49 health vs 58 average across 25,755 Uncategorized plugins

Install conversion

How it's measured →

3.8%

of downloads still active

At least 50K of 1.3M lifetime downloads are still running, above its category: the median Uncategorized plugin keeps 0.6%, across 17,772 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Uncategorized plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

Details

Version
2.7.3
Last updated
7.5y ago
Added
2010-10-19 · 16 yrs old
Requires WP
3.8
Tested up to
5.2.26
Requires PHP
5.3.0

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

47 / 100

Under-optimized

Most to gain: Update recency

Update recency 1/100

Updated 2723 days ago, past the ~180 days where wp.org starts discounting

WP compatibility 15/100

Tested up to WordPress 5.2.26; the current branch is 6.8

Rating quality 90/100

4.7★ over 105 reviews, smoothed to 4.51★

Listing tuning 92/100

4 of 5 tags set · short description in place

To rank higher: Last updated 2723 days ago — ship an update; wp.org decays a listing's search weight after ~180 days.

Get the full rank-higher report →

Daily downloads

Since 5 Oct 2022 · 1,430 days · wp.org + Plugin Pulse archive

+31% vs prior 30d
223 Sep 2026

30-day downloads

Rolling 30-day volume · peak 3.4K · peaks are release surges

1K3 Sep 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

OptionTree · #749youWP Site Options · #25515One Click Demo Impor · #62Redux Framework · #70

Rating trend

Star average over time · dips mark rough releases

4.73 Sep 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

213 Sep 2026

Release cadence

No release in a year
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

0

releases in the last 12 months

7.5y ago

latest release · v2.7.3 · 19 May 2019

61

tagged releases on record

Recent releases

2.7.3 · 19 May 20192.7.2 · 16 May 20192.7.1 · 16 May 20192.7.0 · 16 Apr 20192.6.0 · 10 Feb 20162.5.5 · 1 May 20152.5.4 · 22 Apr 20152.5.3 · 10 Apr 20152.5.2 · 31 Mar 20152.5.1 · 14 Feb 20152.5.0 · 14 Feb 20152.4.6 · 21 Nov 20142.4.5 · 17 Nov 20142.4.4 · 10 Nov 2014

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin · 91% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v2.7 91%
v2.6 6.5%
Older / other versions 2.1%

Estimated active installs

The public count shows “50K+”. Our estimate pins where the real number sits.

tracked estimate
50K–60K ≈55K

Crossed into this band 8 months ago; a band this size takes about a year or more to cross, which places it about 50% of the way through.

Install history since 10 Mar 2015

50K3 Sep 2026

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. — Version 2.7.3 Hotfix – Update regex for Object Injection check to include + bypass and PHP serialized classes. props @erwanlr 2.7.3
  2. — Version 2.7.2 Hotfix – Extend the unfiltered_html iframe capabilities to support additional style attributes. 2.7.2
  3. — Version 2.7.1 Hotfix – Fix error cannot redeclare _sanitize_recursive() . props @shramee Hotfix – Ensure iframe supports the style attribute for users with unfiltered_html capabilities. Hotfix – Ensure noscript is supported for users 2.7.1
  4. — Version 2.7.0 Require PHP 5.3+ Fix all PHPCS errors and warnings. Fix a vulnerability where Object Injection could take place if someone has a valid nonce. Force all settings to be sanitized and escaped before saving and during displa 2.7.0
  5. — Version 2.6.0 Fix a reflected XSS vulnerability with the add_list_item & add_social_links Ajax requests. Fix the Google Fonts URL so it passed the W3 Validator. props @BassemN Fix global_admin_css so it’s only enqueued when needed. Fi 2.6.0
  6. — Version 2.5.5 Hotfix – Allow a 0 value to be saved with certain option types. Contributors via github @BassemN. Hotfix – Stop media from being attached to the OptionTree post type when uploaded from the media manager or customizer. Co 2.5.5

Security history

via Wordfence Intelligence

1 open vulnerability affects the current version (2.7.3). 5 of 6 disclosed are patched.

  1. 2026-08-18 CVE-2026-66620 Deserialization of Untrusted Data Affects <= 2.7.3 No patch available
  2. 2019-08-16 CVE-2016-10895 Improper Neutralization of Input During Web Page Generation Affects <= 2.5.5 Patched in 2.6
  3. 2019-05-19 CVE-2019-15320 Deserialization of Untrusted Data Affects <= 2.7.2 Patched in 2.7.3
  4. 2019-05-19 CVE-2019-15321 Deserialization of Untrusted Data Affects <= 2.7.2 Patched in 2.7.3
  5. 2019-04-16 CVE-2019-15319 Deserialization of Untrusted Data Affects <= 2.6.0 Patched in 2.7.0
  6. 2015-04-22 CVE-2015-9320 Improper Neutralization of Input During Web Page Generation Affects <= 2.5.3 Patched in 2.5.4

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Languages

via translate.wordpress.org

Translated into 78 languages, 2 at 90% or more

Dutch 100%
Estonian 98%
Russian 44%
Swedish 40%
Romanian 33%
Spanish (Spain) 32%
Ukrainian 27%
French (France) 24%
Japanese 24%
English (Canada) 20%
Azerbaijani 14%
English (UK) 14%
German 14%
Vietnamese 13%
English (Australia) 12%
Finnish 11%
Hebrew 11%
Italian 11%
English (New Zealand) 10%
Esperanto 10%
Punjabi 10%
Cebuano 9%
Dutch (Formal) 9%
English (South Africa) 9%

Plus 54 more locales with partial translations.

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Readme readiness

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

Not checked yet. The readme could not be read from WordPress.org on this visit.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2026-03-21 60K+ → 50K+ down after 210 days in tier
  2. 2025-08-23 70K+ → 60K+ down after 204 days in tier
  3. 2025-01-31 80K+ → 70K+ down after 167 days in tier
  4. 2024-08-17 90K+ → 80K+ down after 251 days in tier
  5. 2023-12-10 100K+ → 90K+ down after 2138 days in tier
  6. 2018-02-01 90K+ → 100K+ up after 337 days in tier
  7. 2017-03-01 80K+ → 90K+ up after 252 days in tier
  8. 2016-06-22 70K+ → 80K+ up after 302 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for OptionTree into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/option-tree" width="480" height="300" style="border:0" loading="lazy" title="OptionTree — Plugin Pulse"></iframe>
Preview card ↗

OptionTree: 50K+ active installs, 4.7★ (105 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/option-tree

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.