Sydney Toolbox

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 57% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ defdas2

   11mo ago

   Break my site, fighting all the time

   Read on wp.org ↗
2. ★★★★★ bogger1234

   5.4y ago

   I installed Sydney Toolbox on WordPress 5.7 with my Sydney theme and it works flawlessly. I can confirm the plugin is fixed and replaces my old toolbox plugin. I can recommend this plugin. Thank you for providing it!

   Read on wp.org ↗
3. ★★★★★ jeh6421

   5.5y ago

   crashes your website if enabled

   Read on wp.org ↗
4. ★★★★★ theadmindoomsday

   5.8y ago

   This causes an error with the site to the point it does not allow the site to even start. No way to fix it unless you remove the files via ftp or go back to an older backup/snapshot. Completely removed it now. Ridiculous they have not fixed it in months.

   Read on wp.org ↗
5. ★★★★★ cjmendonca

   6.0y ago

   Não tem assitencia e esta com erro grave, que tira o site do ar

   Read on wp.org ↗
6. ★★★★★ mmonty

   6.1y ago

   Plugin causes entire website to crash when activated. Had to fix by deleting it via FTP… This topic was modified 6 years ago by mmonty.

   Read on wp.org ↗
7. ★★★★★ ingejanssen

   6.2y ago

   By activiating version 1.11 my website crashed and I had to rename this Plugin via FTP to be able to access my website again. I won’t activate it again. Too much risk. This topic was modified 6 years, 1 month ago by ingejanssen.

   Read on wp.org ↗
8. ★★★★★ jaak68

   6.4y ago

   May be a directory issue with wp-content/themes/sydney/ instead of wp-content/themes/sydney-toolbox/ update blew up the whole site with a fatal error Recovered using full backup from month ago

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.36 fixed issue with Elementor missing class 1.36
2. — Version 1.34 fixed some issues with the portfolio 1.34
3. — Version 1.28 added wpml-config.xml file 1.28
4. — Version 1.27 fixed missing escaping in slider widget 1.27
5. — Version 1.26 fixed security issue 1.26
6. — Version 1.25 fixed divider error 1.25

5 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 Sydney Toolbox <= 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget ↗
   2024-05-13 CVE-2024-4473 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.31 Patched in 1.32
2. Medium · 6.4 Sydney Toolbox <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-05-01 CVE-2024-4036 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.30 Patched in 1.31
3. Medium · 6.4 Sydney Toolbox <= 1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery ↗
   2024-04-05 CVE-2024-3208 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.28 Patched in 1.29
4. Medium · 6.4 Sydney Toolbox <= 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id ↗
   2024-03-28 CVE-2024-2936 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.26 Patched in 1.27
5. Medium · 6.4 Sydney Toolbox <= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-02-14 CVE-2024-1447 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.25 Patched in 1.26

Automated install-time checks, tested on PHP 8.1.12 · WP 6.7.1

Translated into 115 languages, 1 at 90% or more

Plus 91 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-05-03 60K+ → 50K+ down after 309 days in tier
2. 2025-06-28 70K+ → 60K+ down after 329 days in tier
3. 2024-08-03 80K+ → 70K+ down after 297 days in tier
4. 2023-10-11 90K+ → 80K+ down after 241 days in tier
5. 2023-02-12 100K+ → 90K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• A Athemes Toolbox 3K+ installs · 4.1★ · 3 shared tags D
• Meta Box 500K+ installs · 4.8★ · 2 shared tags A
• Pods – Custom Content Types and Fields 100K+ installs · 4.8★ · 2 shared tags A
• Custom Post Types and Custom Fields creator – WCK 10K+ installs · 4.6★ · 2 shared tags A
• CubeWP Framework 4K+ installs · 4.3★ · 2 shared tags A
• Custom post types, Custom Fields & more 3K+ installs · 4.5★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for Sydney Toolbox into a readme, a review or a deck. It updates itself.

Sydney Toolbox: 50K+ active installs, 2.3★ (15 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/sydney-toolbox