WPGraphQL
by Jason Bahl · Uncategorized
Also makes 2 other plugins · 45K+ installs across the portfolio →
WPGraphQL adds a flexible and powerful GraphQL API to WordPress, enabling efficient querying and interaction with your site's data.
Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.
Health
B 83/100
Open vulnerability
Active installs
30K+
≈39K estimated
Momentum
-3%
downloads vs prior 30d
Biggest opportunity: Swap “rest api” for “check ins”. “rest api” isn't earning its slot: you're not in the first 24 results for its own search. “check ins” sits at #10 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.
83 health vs 58 average across 25,755 Uncategorized plugins
Install conversion
How it's measured →1.7%
of downloads still active
At least 30K of 1.8M lifetime downloads are still running, above its category: the median Uncategorized plugin keeps 0.6%, across 17,772 plugins.
Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Uncategorized plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.
This plugin shipped 37 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.
Details
Directory ranking optimization
How it's scored →How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.
Excellent listing optimization
Well tuned across the board
Updated 3 days ago
Tested up to WordPress 7.0.8, the current branch or newer
4.9★ over 48 reviews, smoothed to 4.49★
5 of 5 tags set · short description in place
Search visibility
How it's tracked →Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.
31
Momentum
Losing ground
-0.9
Velocity
places per keyword, 27d
7%
Breadth
of keywords climbing, 27d
-0.7
Acceleration
recent half vs earlier
wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.
| Keyword | wp.org | On merit | wp.org move, 90 days |
|---|---|---|---|
| graphql your tag | #1 | #1 | 0 |
| decoupled your tag | #1 | #1 | 0 |
| wpgraphql | #2 | #1 | 0 |
| wp graphql | #1 | #1 | 0 |
| graphql rest api | #1 | #1 | 0 |
| decoupled wordpress | #1 | #1 | 0 |
| react your tag | #4 | #4 | down 1 |
| headless your tag | #9 | #9 | down 3 |
| headless react | #3 | #3 | 0 |
| interaction | #14 | #14 | down 1 |
| check ins | #10 | #10 | — |
| patch | #11 | #8 | down 2 |
| sdk | #11 | #6 | down 5 |
| wp headless | #7 | #6 | 0 |
| infrastructure | #14 | #11 | down 4 |
| api for react integration | #10 | #11 | up 1 |
| canonical | #21 | #12 | down 1 |
| fetch | #21 | #10 | up 1 |
| release notes | #21 | #10 | down 2 |
| headless wordpress | #23 | #13 | down 4 |
| rest api your tag | Not in the top 24 | ||
76 searches this plugin appeared in over the last 90 days, 20 listed. 54 left out as unrelated or noise (years, numbers, stray words). 1 of its tags isn't in the top 24 for their own search.
What to do about it
- Swap “rest api” for “check ins”. “rest api” isn't earning its slot: you're not in the first 24 results for its own search. “check ins” sits at #10 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.
Daily downloads
Since 5 Oct 2022 · 1,489 days · wp.org + Plugin Pulse archive
30-day downloads
Rolling 30-day volume · peak 69.7K · peaks are release surges
Directory rank vs rivals
wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you
Rating trend
Star average over time · dips mark rough releases
Health trend
Composite health score, snapshotted daily
Update activity
How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.
Release cadence
Actively maintainedHow often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.
37
releases in the last 12 months
3d ago
latest release · v2.26.0 · 29 Oct 2026
184
tagged releases on record
Recent releases
What its installed base runs
via wordpress.orgShare of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.
Estimated active installs
The public count shows “30K+”. Our estimate pins where the real number sits.
Crossed into this band 3 years ago; a band this size takes about a year or more to cross, which places it about 90% of the way through.
Install history since 15 Nov 2020
Recent reviews
All reviews on wp.org ↗- ★★★★★ con1.6y ago
GraphQL vs. REST API 10 : 0 Thank you for this plugin. Building my headless application with WPGraphQL is fun. The repl interface to test queries is A+.
Read on wp.org ↗ - ★★★★★ psychosispicks3.2y ago
I’m so glad I decided to transition to a headless WP, and WPGraphQL made this possible, convenient and super fast.
Read on wp.org ↗ - ★★★★★ benknight3.4y ago
I operate a large blog that uses WordPress as a headless CMS with a Next.JS frontend, which is largely enabled by this plugin. Let me just say first that creating an entire alternative third-party data API is an ambitious undertaking and I appreciate all the work the authors have put into it. But as a developer I have to throw out a word of caution that this plugin often has major bugs that can have critical impact on your production website. For example after a recent minor update we discovered a bug where any URL with a special character in it started returning a 404, causing several of our pages to suddenly become unavailable to users and delisted from Google, and this went on for many months before we realized it. There have been many similar instances. My general approach is to lean more on WordPress’s REST API over time which is more reliable since it’s maintained by the WordPress team, and only use WPGraphQL when it’s necessary. Also recommend turning off auto-updates and test your website extremely thoroughly after any upgrade. This topic was modified 3 years, 1 month ago by benknight. This topic was modified 3 years, 1 month ago by benknight.
Read on wp.org ↗ - ★★★★★ chisnghiax4.2y ago
Great!
Read on wp.org ↗ - ★★★★★ 2cubed4.2y ago
One of the best plugins for WordPress. It’s right up there with ACF!
Read on wp.org ↗ - ★★★★★ mauretto19784.4y ago
Great plugin, everyone should use it. The IDE is a valuable plus, and it can be used to learn GraphQL from scratch. From the developer’s point of view, the plugin is super easy to extend, thanks to the great documentation. Don’t forget to check the official YouTube channel. If you need extra support for custom post types and metas, I just released v1.0.70 of my plugin ACPT with full support to WPGraphQL. Thank you so much John! This topic was modified 4 years, 1 month ago by mauretto1978.
Read on wp.org ↗ - ★★★★★ Camilo4.5y ago
Great tool for getting data from your WP into your SPA. I had some trouble with a conflicting plugin (Post Types Order) that caused unexpted results when paginating my posts but the support provided by both Jason Bahl and David Levine was absolutely top notch and I managed to resolve the issue within hours.
Read on wp.org ↗ - ★★★★★ turboloop4.6y ago
Over a year ago I switched from using REST to this plugin. I mainly build Angular Apps using Apollo client. Works perfectly fine and increases development speed.
Read on wp.org ↗
Latest updates
via wp.org changelogRecent releases and news for this plugin
- — Version 2.17.0 New Features add hour, minute, and second to DateInput for sub-day date filtering ( #3967 ) deps: bump the npm-prod-minor-patch group across 1 directory with 5 updates ( #3946 ) deps: bump the npm-prod-minor-patch group 2.17.0
- — Version 2.16.0 New Features deps: bump the npm-prod-minor-patch group across 1 directory with 5 updates ( #3905 ) Bug Fixes deps-dev: bump the npm-dev-minor-patch group across 1 directory with 7 updates ( #3894 ) 2.16.0
- — Version 2.15.1 Security prevent user enumeration via the deprecated SendPasswordResetEmailPayload.user field; it is now gated on the list_users capability. See GHSA-jhh7-832h-f8hv Bug Fixes ci: deploy WordPress.org assets via ASSETS_DI 2.15.1
- — Version 2.15.0 New Features deps: bump @wordpress/hooks from 3.58.0 to 4.44.0 ( #3853 ) deps: bump the npm-prod-minor-patch group across 1 directory with 7 updates ( #3865 ) resolve WPGraphQL settings outside the admin (at the /graphql 2.15.0
- — Version 2.14.1 Bug Fixes Allow compatible interface field override with register_graphql_field() ( #3539 ) 2.14.1
- — Version 2.14.0 New Features deps: bump sanitize-html from 2.17.3 to 2.17.4 ( #3831 ) deps: bump the npm-prod-minor-patch group across 1 directory with 4 updates ( #3826 ) deps: bump the npm-prod-minor-patch group with 4 updates ( #3820 2.14.0
Security history
via Wordfence Intelligence1 open vulnerability affects the current version (2.26.0). 9 of 10 disclosed are patched.
- 2026-10-13 CVE-2026-109703 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.24.0 No patch available
- 2026-04-21 CVE-2026-40762 Improper Neutralization of Special Elements used in an SQL Command Affects < 2.11.1 Patched in 2.11.1
- 2019-05-08 CVE-2019-9880 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 0.2.3 Patched in 0.3.0
Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.
CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.
Languages
via translate.wordpress.orgTranslated into 3 languages, 0 at 90% or more
AI assistants
How it's measured →Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.
Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.
Readme readiness
6 of 8 pass · checked 28 Oct 2026Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.
- ✓ Says what it does "WPGraphQL adds a flexible and powerful GraphQL API to WordPress, enabling efficient querying and interactio..."
- ✓ Has a FAQ 4 questions in the FAQ.
- ✓ FAQ asks real questions 4 of 4 read like questions a user would type.
- ! Names who it is for Never says who the plugin is for or what they use it for.
- ✓ Names what it works with Mentions Discord.
- ✓ Headings and lists 2 headings and 3 lists.
- ✓ Enough to quote 2,098 characters of description.
- ! Tags match the text Only 1 of 5 tags appear in the text ("decoupled", "headless", "react", "rest-api" missing).
Growth timeline
Install-tier crossings we have observed, and how long each tier took to outgrow
- 2023-11-12 20K+ → 30K+ up after 2 days in tier
- 2023-11-10 30K+ → 20K+ down after 1 days in tier
- 2023-11-09 20K+ → 30K+ up after 401 days in tier
- 2022-10-04 9K+ → 20K+ up after 572 days in tier
- 2021-03-11 8K+ → 9K+ up after 30 days in tier
- 2021-02-09 6K+ → 8K+ up after 68 days in tier
- 2020-12-03 1K+ → 6K+ up
Competes with
The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).
-
WPGraphQL IDE 1K+ installs · 3.6★ · 3 shared tags -
CoCart – Headless REST API for WooCommerce 900+ installs · 4.5★ · 3 shared tags A -
CoCart CORS Support 300+ installs · 3.6★ · 3 shared tags - W WPGraphQL Blocks 300+ installs · 3.6★ · 3 shared tags
-
Sticklight 300+ installs · 3.6★ · 3 shared tags -
CoCart JWT Authentication 200+ installs · 3.6★ · 3 shared tags
Embed this report card
Drop a live Pulse card for WPGraphQL into a readme, a review or a deck. It updates itself.
<iframe src="https://plugins.wpmayor.com/embed/wp-graphql" width="480" height="300" style="border:0" loading="lazy" title="WPGraphQL — Plugin Pulse"></iframe> WPGraphQL: 30K+ active installs, 4.9★ (48 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/wp-graphql
Spotted a number that looks wrong? Report a data issue and we'll check it against the source.