WP Extended – The Ultimate WordPress Toolkit

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 70% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ jamescaddy

   4mo ago

   I have been using WP Extended on my client sites since finding a recommendation for it on Youtube. It’s become one of those plugins I just install without thinking! The modularity and low-key yet polished UI is what sold me. Turn on what you need, leave the rest off. Duplicate posts, SMTP, rollback, custom admin URL, code snippets… stuff I used to install four or five separate plugins for. Now it’s just one with one update to run and one UI to deal with. It’s exactly what I have been looking for and keeps getting better and better. Support is excellent too.

   Read on wp.org ↗
2. ★★★★★ ssomedia

   12mo ago

   The Swiss Army knife of WordPress plugins.

   Read on wp.org ↗
3. ★★★★★ Sahil Dadwal

   1.3y ago

   Discovered this amazing plugin around 2 months ago and decided to give it a try on my personal website. Gotta say, the experience was totally different – in a good way! 😄 At first, I faced a few issues here and there, nothing major but still needed fixing. What really impressed me was the support team – they were super helpful and quick! Within just a few hours, everything was sorted. Big shoutout to tdrayson and Sumit Singh – you guys rock! 🙌 Now my site runs smooth, and the features this plugin offers are just what I needed. Feels like it’s made by folks who really understand what users want. Definitely a solid 5-star from my side ⭐⭐⭐⭐⭐

   Read on wp.org ↗
4. ★★★★★ rj2020

   1.3y ago

   Love the product but unable to get hold or a response from the support team. Such a dissapointment I was going to purchase the plugin but with slow or in this case no support I do not see myself spending money and getting use to a plugin, and if something goes wrong then getting burned afterwards for slow or no response from plugin developers. Hopefully, I will get assistance within the next 48 hours and I will gladly remove or update my review if I can just get support or some sort of an acknowledgement that someone is seeing my support issue? I love the plugin so I am very sure there is a perfectly good reason for not responding to my support question. You have a plugin that you made available to test, surely it will help sales to answer support questions?Thank you Progress Update2025-05-14: No reply from support, first support request made May 11, 2025 @ 5:03am been waiting almost 3 days. Let’s hope tomorrow when I check back in there is something that indicates the plugin developers are interested in assisting me. Would love to purchase the product but I have to have support when needed. Thank you This topic was modified 1 year, 2 months ago by rj2020. This topic was modified 1 year, 2 months ago by rj2020.

   Read on wp.org ↗
5. ★★★★★ Autistic PhD

   2.1y ago

   I’ve had a license for WP Extended since it was born, and I’ve enjoyed watching it grow in sophistication. I really like that it’s modular. This does things that I would normally have to deal with via code snippets or additional plugins. This plugin has become a part of my “new site base stack” – only possible because of the modularity and subsequent small footprint. Awesome tool. This topic was modified 1 year, 11 months ago by Autistic PhD. Reason: fixing typo

   Read on wp.org ↗
6. ★★★★★ Nishita Joshi

   2.2y ago

   WPExtended is a robust plugin that extends the functionality of WordPress with ease. It seamlessly integrates into the WordPress dashboard, offering a user-friendly interface that simplifies complex tasks. The plugin’s performance is commendable. Compatibility with other plugins and themes is generally excellent, ensuring smooth operation within diverse WordPress environments. Overall, WpExtended stands out for its reliability, versatility, and enhancement of WordPress capabilities, making it a valuable tool for both developers and non-technical users alike.

   Read on wp.org ↗
7. ★★★★★ Darshan Prajapat

   2.2y ago

   WP Extended is very easy to use and combines the functionality of many plugins into a single, convenient plugin.

   Read on wp.org ↗
8. ★★★★★ AlexGraphicD

   2.6y ago

   This is one of those rare exceptional plugins in the WordPress ecosystem. It is very promising and they have a generous number of features in the free version. I love the intuitive interface and the easy way to enable/disable the modules. It is installed on every single website I manage.

   Read on wp.org ↗

17 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 8.8 The Ultimate WordPress Toolkit – WP Extended <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation via Menu Editor Module ↗
   2026-03-21 CVE-2026-4314 Improper Privilege Management Affects <= 3.2.4 Patched in 3.2.5
2. Medium · 6.4 WP Extended <= 3.0.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload ↗
   2025-05-27 CVE-2025-4963 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.15 Patched in 3.0.16
3. Medium · 6.1 The Ultimate WordPress Toolkit – WP Extended <= 3.0.14 - Reflected Cross-Site Scripting ↗
   2025-03-27 CVE-2025-30796 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.14 Patched in 3.0.15
4. Medium · 5.3 The Ultimate WordPress Toolkit – WP Extended <= 3.0.13 - Missing Authorization to Unauthenticated Post Order Manipulation ↗
   2025-02-11 CVE-2024-13554 Missing Authorization Affects <= 3.0.13 Patched in 3.0.14
5. High · 7.5 The Ultimate WordPress Toolkit – WP Extended <= 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module ↗
   2025-01-17 CVE-2024-13184 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.0.12 Patched in 3.0.13
6. High · 7.4 The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
   2025-01-07 CVE-2024-11916 Missing Authorization Affects <= 3.0.11 Patched in 3.0.12
7. High · 8.8 The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution ↗
   2025-01-07 CVE-2024-11816 Missing Authorization Affects <= 3.0.11 Patched in 3.0.12
8. Medium · 6.1 The Ultimate WordPress Toolkit – WP Extended <= 3.0.9 - Reflected Cross-Site Scripting ↗
   2024-10-16 CVE-2024-9347 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.9 Patched in 3.0.10
9. Medium · 6.1 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting ↗
   2024-09-30 CVE-2024-47386 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.8 Patched in 3.0.9
10. Medium · 6.1 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via selected_option ↗
    2024-09-03 CVE-2024-8117 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.8 Patched in 3.0.9
11. High · 8.8 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Download ↗
    2024-09-03 CVE-2024-8104 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 3.0.8 Patched in 3.0.9
12. Medium · 6.1 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via page ↗
    2024-09-03 CVE-2024-8119 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.8 Patched in 3.0.9
13. Medium · 6.5 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information Exposure ↗
    2024-09-03 CVE-2024-8106 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.0.8 Patched in 3.0.9
14. High · 8.8 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Arbitrary Options Update ↗
    2024-09-03 CVE-2024-8102 Missing Authorization Affects <= 3.0.8 Patched in 3.0.9
15. Medium · 5.4 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Insecure Direct Object Reference ↗
    2024-09-03 CVE-2024-8123 Authorization Bypass Through User-Controlled Key Affects <= 3.0.8 Patched in 3.0.9
16. Medium · 5.4 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Missing Authorization to Admin Username Change ↗
    2024-09-03 CVE-2024-8121 Missing Authorization Affects <= 3.0.8 Patched in 3.0.9
17. Medium · 6.1 The Ultimate WordPress Toolkit – WP Extended <= 2.4.7 - Unauthenticated Stored Cross-Site Scripting ↗
    2024-06-27 CVE-2024-37259 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.7 Patched in 3.0.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 5 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-04-07 700+ → 600+ down after 112 days in tier
2. 2025-12-16 600+ → 700+ up after 2 days in tier
3. 2025-12-14 700+ → 600+ down after 75 days in tier
4. 2025-09-30 800+ → 700+ down after 5 days in tier
5. 2025-09-25 1K+ → 800+ down after 580 days in tier
6. 2024-02-23 900+ → 1K+ up after 46 days in tier
7. 2024-01-08 800+ → 900+ up after 4 days in tier
8. 2024-01-04 900+ → 800+ down after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin 4M+ installs · 4.8★ · 1 shared tag A
• FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP 600K+ installs · 4.8★ · 1 shared tag A
• Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more 500K+ installs · 4.6★ · 1 shared tag A
• GoSMTP – SMTP for WordPress 500K+ installs · 4.1★ · 1 shared tag B
• Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App 300K+ installs · 4.7★ · 1 shared tag A
• WP Mail Logging 300K+ installs · 4.7★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for WP Extended – The Ultimate WordPress Toolkit into a readme, a review or a deck. It updates itself.

WP Extended – The Ultimate WordPress Toolkit: 600+ active installs, 4.9★ (28 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/wpextended