PilotPress

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

21 searches this plugin appeared in over the last 90 days, 7 listed. 14 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 98% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 5 months ago and the previous band took 21 months to cross, so the real count is still just under 1K.

1. ★★★★★ Till Krüss

   7.4y ago

   Ontraport puts no effort into this plugin. Don’t use it.

   Read on wp.org ↗
2. ★★★★★ bretterer

   8.4y ago

   Answer me this. Why does a developer make a plugin that in incompatible with almost all the most popular plugins out there? I have been using this plugin not realizing how unfriendly it is with things like backup buddy. Take a look at the support answer when mentioning this. Unfortunately, BackupBuddy is incompatible with PilotPress. Other plugins that may conflict: Any other “membership” plugin Any plugin that manages “redirection” Caching plugins All in One SEO Backup Buddy Page Expiration Robot or Scarity Samuri User Role Editor Login Form Editors (using redirection) Really? I would stay away from this plugin at all costs until they can figure out how to play nicely. I understand not wanting to play nice with other membership plugins, but having code that messes up All in One SEO (and Yoast i found out) along with “Any plugin that manages redirections”? Caching plugins are conflicting too? WTH?!?!?!

   Read on wp.org ↗
3. ★★★★★ theyrobburnfield

   9.0y ago

   This plugin does the basics of what it’s suppose to do doesn’t do them that well. The current customer care center in pilot press is rather lacking. Not only is a bit cluttered containing so many different things (invoices, subscriptions, change password, change email, update payment info) it does a lot of things that just don’t fit with modern web standards. For starters why are you using the standard confirm/eval as popups to do anything? These functions are typically meant for very low level application stuff like a WordPress wp-admin area since they will never be seen by clients. Instead you should really have inline error messages with errors below form fields. See something like Foundation’s Abide JS . These kind of messages are much cleaner and nicer for clients to read, can be made responsive, and your phone won’t warn you about popups from this browser. After clicking the button twice my phone immediately asked me if I want to prevent popups from this site. Next, while we’re in the center having payment methods open a completely new browser window is just bad. This is just something you shouldn’t be doing. First it ties my hands not just to your markup, but also your styles. At least with the rest of the center I can override styles to sort-of get things looking the way I want but with that payment area I’m completely out of luck. I’m stuck with your very limited header image, background color, foreground color options. This means this part of the customer center will be completely off brand for customers. It also means the customer is going to notice a complete url change. “Whoah why am I on something called forms.ontraport.com all of a sudden” the client asks. This tends to lower peoples confidence in something when you just change site urls like this (especially something collecting credit card info). Furthermore why can’t we just keep them on site? I honestly think you guys should rewrite this as a proper modal or heck maybe even a sub page that makes use of an API to fetch and update the payment info rather than hosting this directly on your forms.ontraport.com domain. Furthermore, that popup window isn’t responsive on mobile. Opened on my phone to find the forms are incredibly small to the point of not being legible. Also since we’re on forms. The login form just submits directly to wp-login.php . No checks, no error messages, just redirect to wp-login.php. Meaning I need to completely brand this page and people get kicked off of wherever they were. Once again I’d really rethink this and maybe implement some js based calls to check for login errors and the like and show nice error messages in the form you are in rather than just sending them to the WordPress backend login area. But I suppose this brings me to the final point….. why no html overrides? See something like WooCommerce. While not perfect the system uses a set of templates included with the plugin and adds lots of filters/actions to let you gracefully replace little bits as you need to. And if you’re a power user you can actually override the templates altogether in your custom template. This gives power users a lot of needed control over templating and user experience, allowing them to brand these parts of the site to meet the rest of their design standards. Then even the editor pieces for inserting forms/media etc don’t seem to work for me and there are lots and lots of plugin conflicts, with really no room to make them work together since there are almost no filters/actions to hook into. Furthermore, majority of functions are shortcodes so even if you want to do checks in code you need to use the shortcode calls since the developer decided to write the majority of the plugin into one great big file rather than breaking down in a few smaller files each focussed on a particular feature. As it stands Pilot Press just feels kind of below standards vs OntraPort platform itself. The main OntraPort app feels and works great. It feels modern, but the Pilot Press plugin almost feels like a legacy feature that was forgotten rather than the main go to plugin for integrating OntraPort into WordPress. Personally I’d recommend using a different plugin for integrating OntraPort or just directly calling their api yourself rather than trying to use this plugin.

   Read on wp.org ↗
4. ★★★★★ Cyndi

   10.1y ago

   Changing my rating to 5 stars. Frank has been a tremendous help in smoothing the issues and I’m happy! This topic was modified 9 years, 9 months ago by Cyndi.

   Read on wp.org ↗
5. ★★★★★ Guillaume Hamel

   10.5y ago

   Out of all the memory used by the site’s plugins (where this has been installed), this one is eating up over 2/3 of the total. Additionally, since we’ve updated to the latest version, the WYSIWYG post editor isn’t even working… seems to be some kind of javascript conflict (text mode does work). I feel that the codebase could use a lot more optimisation.

   Read on wp.org ↗

All 4 disclosed vulnerabilities are patched in the current version (2.0.46). Sites still on an older version should update.

1. Patched High · 8.8 PilotPress <= 2.0.43 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover via 'username' Parameter ↗
   2026-10-15 CVE-2026-85659 Improper Privilege Management Affects <= 2.0.43 Patched in 2.0.44
2. Patched Medium · 6.4 PilotPress <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-09-22 CVE-2025-58238 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.39 Patched in 2.0.41
3. Patched Medium · 5.4 PilotPress <= 2.0.39 - Missing Authorization ↗
   2025-09-22 CVE-2025-58221 Missing Authorization Affects <= 2.0.39 Patched in 2.0.41
4. Patched Medium · 5.4 PilotPress <= 2.0.30 - Authenticated(Subscriber+) Missing Authorization via multiple AJAX functions ↗
   2024-01-31 CVE-2024-23524 Missing Authorization Affects <= 2.0.30 Patched in 2.0.31

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-06-11 1K+ → 900+ down after 629 days in tier
2. 2024-09-20 2K+ → 1K+ down after 595 days in tier
3. 2023-02-03 3K+ → 2K+ down after 1 days in tier
4. 2023-02-02 2K+ → 3K+ up after 4 days in tier
5. 2023-01-29 3K+ → 2K+ down after 17 days in tier
6. 2023-01-12 2K+ → 3K+ up after 1 days in tier
7. 2023-01-11 3K+ → 2K+ down after 1 days in tier
8. 2023-01-10 2K+ → 3K+ up after 4 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for PilotPress into a readme, a review or a deck. It updates itself.

PilotPress: 900+ active installs, 2.2★ (5 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/pilotpress