WP Attachments

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 49% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ baritono

   2.9y ago

   E’ un fantastico plugin, con tutta la sua semplicità. Metto 5 stelle con la speranza che l’autore lo vorrà aggiornare. Perché ad esempio, ogni volta che aggiorno un/a pagina/articolo gli allegati si attivano automaticamente, anche se prima erano disattivati. Sarebbe meglio averli disattivati in default.

   Read on wp.org ↗
2. ★★★★★ orangeletter2

   3.3y ago

   The plugin is abandoned by the original developer and lacks functionality. It does not work anymore.

   Read on wp.org ↗
3. ★★★★★ rebelord

   4.1y ago

   also I’d love an option not to show the list at all in frontend – i would use it only for unattaching in the backend. A zip-all-attachments download would be nice. And as mentioned, images in the list should be shown as thumbnails. Also there is a bug – when I edit the post and then try to unattach, it wants to reload and leave the post unsaved. Ajax would suit better.

   Read on wp.org ↗
4. ★★★★★ renpub

   4.5y ago

   I tried over a dozen other plugins in order to display a simple list of PDFs which the user can upload and display on a page. I was relieved to finally find WP Attachments worked as expected and was simple to set up. Php 8 update, if needed, would be great and compatibility with page builders and ease of CSS customisation are always welcome features. Thank you for your work which is much appreciated.

   Read on wp.org ↗
5. ★★★★★ valebubble

   4.7y ago

   This plugin is simple but very focused and achieves what it needs to. That said, the underlying code is messy and at times poorly written. For example, the attachments div has no class or id so you can’t target it with css. It forces its style using the “style” attribute which is pretty bad for customizability. I had to use a filter and wrap it in another div just to have a class I could target with custom CSS. Another big issue: in the admin options, I am not able to use a custom template for the attachment title. Selecting the “Custom” option does nothing because the plugin: – Uses a script HTML tag to load jQuery from an external CDN, in the middle of the page. This is not the WordPress standard way of loading jQuery (or any script at all) and can potentially cause many issues. – Attempts to use the “$” variable instead of using “jQuery”. This causes an error (TypeError: $ is not a function) that blocks the execution of javascript and prevents the options from working correctly. So if the plugin works for you out-of-the-box, that’s great. If you need to adapt it somehow, be aware that the code is very hard to work with.

   Read on wp.org ↗
6. ★★★★★ lombino

   4.9y ago

   Bravo!!

   Read on wp.org ↗
7. ★★★★★ kooba

   5.3y ago

   It’s a really good plugin that give you ability to add e-mail client-like attachments function to your posts. It would be perfect though if it also allowed to set if the file can be downloaded or just viewed in the browser. Anyway, still giving it 5 stars.

   Read on wp.org ↗
8. ★★★★★ zavakz

   5.4y ago

   Found this after trying several plugins simply to display attached files and this seems to do the job perfectly. Needs to have shortcodes or a means to manually set the location in the template.

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-03-14 Version 5.3.4 Minor fixes and improvements. 5.3.4
2. 2026-02-02 Version 5.3 Better permission handling Redesigned settings screen 5.3
3. 2026-01-19 Version 5.2.1 Minor fixes and improvements. 5.2.1
4. 2025-06-09 Version 5.2 Fixed regression with images (thanks @reesher + @steeltape for feedback) Added option to enable/disable for specific custom post types (completely or only frontend) Other minor fixes and improvements. 5.2
5. 2025-05-25 Version 5.1 Date placeholders in attachment templates now use the WordPress date format setting ( Settings > General > Date Format ) for better localization and consistency. Improved templating: You can now use WordPress date format 5.1
6. 2023-02-15 Version 5.0.6 Compatibility check Security fixes Minor changes 5.0.6

5 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Attachments <= 5.2 - Missing Authorization ↗
   2025-12-31 CVE-2025-62888 Missing Authorization Affects <= 5.2 Patched in 5.2.1
2. Medium · 6.1 WP Attachments <= 5.0.12 - Reflected Cross-Site Scripting via attachment_id Parameter ↗
   2025-05-27 CVE-2025-5082 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.0.12 Patched in 5.1
3. Medium · 4.3 WP Attachments <= 5.0.11 - Cross-Site Request Forgery ↗
   2023-10-12 CVE-2023-45651 Cross-Site Request Forgery (CSRF) Affects <= 5.0.11 Patched in 5.0.12
4. Medium · 5.5 WP Attachments <= 5.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2022-12-21 CVE-2022-4330 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.0.5 Patched in 5.0.6
5. Medium · 5.5 WP Attachments <= 5.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2022-10-18 CVE-2022-3469 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.0.4 Patched in 5.0.5

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 128 languages, 1 at 90% or more

Plus 104 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-07-27 4K+ → 3K+ down after 592 days in tier
2. 2023-12-13 5K+ → 4K+ down after 1 days in tier
3. 2023-12-12 4K+ → 5K+ up after 3 days in tier
4. 2023-12-09 5K+ → 4K+ down after 26 days in tier
5. 2023-11-13 4K+ → 5K+ up after 1 days in tier
6. 2023-11-12 5K+ → 4K+ down after 6 days in tier
7. 2023-11-06 4K+ → 5K+ up after 1 days in tier
8. 2023-11-05 5K+ → 4K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Phoenix Media Rename 50K+ installs · 4.6★ · 2 shared tags A
• Media File Renamer: Rename for better SEO (AI-Powered) 40K+ installs · 4.6★ · 2 shared tags A
• U Unique Headers 10K+ installs · 4.9★ · 2 shared tags A
• Media Deduper 9K+ installs · 3.9★ · 2 shared tags B
• Download Attachments 8K+ installs · 4.4★ · 2 shared tags A
• F4 Media Taxonomies 1K+ installs · 4.5★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for WP Attachments into a readme, a review or a deck. It updates itself.

WP Attachments: 3K+ active installs, 4.5★ (42 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/wp-attachments