Code Embed

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 52% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ nick0488

   2.1y ago

   I was working on a client site and I can someone had installed code embed previously but somehow it got forgetten about. Its putting in code even when deactivated.But I have no way of adding code nevermind removing old code. There is no useful information, even the FAQ didn’t help. Theres no way to see what code has been added or where. Except from a code search but you still need to type in something – without knowing the suffix its pointless.I couldn’t even add new code to see how it works. Absolutely no option, no custom fields nothing. Its nothing but clutter.

   Read on wp.org ↗
2. ★★★★★ kimberean

   3.1y ago

   Although page says “see FAQ” there is NO FAQ. Wasted a lot of time trying to get this to work. Someone raised this a year ago and no change has been made. Clearly no support or interest in helping users. Useless.

   Read on wp.org ↗
3. ★★★★★ ritadevine

   3.6y ago

   I have good experience with it. Nice plugin.

   Read on wp.org ↗
4. ★★★★★ David

   3.7y ago

   It is very useful plugin

   Read on wp.org ↗
5. ★★★★★ Dylan H.

   4.2y ago

   It’s great to have a plugin to display code on your website integrated with the block editor. I’ve struggled to find one that is so stable but Code Embed has everything I need. Highly recommended!

   Read on wp.org ↗
6. ★★★★★ justin27

   4.2y ago

   I wasn’t able to use this plugin due to my theme but the plugin developer is awesome and provides great support for this FREE plugin!

   Read on wp.org ↗
7. ★★★★★ Meu Ativo Digital

   4.5y ago

   Excelente plugin! Vai me ajudar muito. Parabéns David Artiss 👏👏👏

   Read on wp.org ↗
8. ★★★★★ mbaudin

   4.6y ago

   It displays the URL inside my post instead of the page. I can’t figure it out.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.6.3 Security: Fixed a stored XSS vulnerability that was reported by pphreak-1001 2.6.3
2. — Version 2.6.2 Security: Fixed a vulnerability, reported by an automated security review from WordPress.org 2.6.2
3. — Version 2.6.1 Security: Fixed CVE-2026-48093, as reported by manop55555 , as the code was vulnerable to stored Cross-Site Scripting (XSS) through the external URL embed feature in post content. 2.6.1
4. — Version 2.6 Enhancement: A massive review of the code means that it now conforms to WCAG 2.1 AA standards, and is more secure and performant than ever before. This is not the end to improvements, however, and expect 2.7 to drop soon 2.6
5. — Version 2.5.2 Security: Fixed CVE-2026-2512, as reported by Muhammad Yudha via WordFence . 2.5.2
6. — Version 2.5.1 Security: Changed wp_remote_get to wp_safe_remote_get to improve security. 2.5.1

4 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 Code Embed <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fields ↗
   2026-03-17 CVE-2026-2512 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.1 Patched in 2.5.2
2. Medium · 6.4 Code Embed <= 2.5 - Authenticated (Contributor+) Server-Side Request Forgery ↗
   2024-11-08 CVE-2024-10814 Server-Side Request Forgery (SSRF) Affects <= 2.5 Patched in 2.5.1
3. Medium · 6.4 Code Embed <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-10-03 CVE-2024-8804 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4 Patched in 2.5
4. Medium · 6.5 Code Embed <= 2.3.6 - Authenticated(Contributor+) Denial of Service ↗
   2023-12-05 CVE-2023-49837 Uncontrolled Resource Consumption Affects <= 2.3.6 Patched in 2.3.7

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 79 languages, 1 at 90% or more

Plus 55 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-03-01 20K+ → 10K+ down after 1 days in tier
2. 2026-02-28 10K+ → 20K+ up after 2 days in tier
3. 2026-02-26 20K+ → 10K+ down after 958 days in tier
4. 2023-07-14 30K+ → 20K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WebberZone Snippetz – Header, Body and Footer manager 2K+ installs · 4.3★ · 4 shared tags A
• Shortcoder — Create Shortcodes for Anything 100K+ installs · 4.8★ · 3 shared tags A
• S Scripts n Styles 30K+ installs · 4.2★ · 3 shared tags D
• R Raw HTML 10K+ installs · 4.2★ · 3 shared tags C
• WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript 9K+ installs · 4.1★ · 3 shared tags B
• Add Code To Head 3K+ installs · 4.1★ · 3 shared tags B

Embed this report card

Drop a live Pulse card for Code Embed into a readme, a review or a deck. It updates itself.

Code Embed: 10K+ active installs, 4.4★ (45 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/simple-embed-code