WP Extended – Modular WordPress Toolkit

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

43 searches this plugin appeared in over the last 90 days, 5 listed. 38 left out as unrelated or noise (years, numbers, stray words). 4 of its tags aren't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 7 months ago; a band this size takes about a year or more to cross, which places it about 50% of the way through.

1. ★★★★★ jamescaddy

   6mo ago

   I have been using WP Extended on my client sites since finding a recommendation for it on Youtube. It’s become one of those plugins I just install without thinking! The modularity and low-key yet polished UI is what sold me. Turn on what you need, leave the rest off. Duplicate posts, SMTP, rollback, custom admin URL, code snippets… stuff I used to install four or five separate plugins for. Now it’s just one with one update to run and one UI to deal with. It’s exactly what I have been looking for and keeps getting better and better. Support is excellent too.

   Read on wp.org ↗
2. ★★★★★ ssomedia

   1.1y ago

   The Swiss Army knife of WordPress plugins.

   Read on wp.org ↗
3. ★★★★★ Sahil Dadwal

   1.4y ago

   Discovered this amazing plugin around 2 months ago and decided to give it a try on my personal website. Gotta say, the experience was totally different – in a good way! 😄 At first, I faced a few issues here and there, nothing major but still needed fixing. What really impressed me was the support team – they were super helpful and quick! Within just a few hours, everything was sorted. Big shoutout to tdrayson and Sumit Singh – you guys rock! 🙌 Now my site runs smooth, and the features this plugin offers are just what I needed. Feels like it’s made by folks who really understand what users want. Definitely a solid 5-star from my side ⭐⭐⭐⭐⭐

   Read on wp.org ↗
4. ★★★★★ rj2020

   1.5y ago

   Love the product but unable to get hold or a response from the support team. Such a dissapointment I was going to purchase the plugin but with slow or in this case no support I do not see myself spending money and getting use to a plugin, and if something goes wrong then getting burned afterwards for slow or no response from plugin developers. Hopefully, I will get assistance within the next 48 hours and I will gladly remove or update my review if I can just get support or some sort of an acknowledgement that someone is seeing my support issue? I love the plugin so I am very sure there is a perfectly good reason for not responding to my support question. You have a plugin that you made available to test, surely it will help sales to answer support questions?Thank you Progress Update2025-05-14: No reply from support, first support request made May 11, 2025 @ 5:03am been waiting almost 3 days. Let’s hope tomorrow when I check back in there is something that indicates the plugin developers are interested in assisting me. Would love to purchase the product but I have to have support when needed. Thank you This topic was modified 1 year, 2 months ago by rj2020. This topic was modified 1 year, 2 months ago by rj2020.

   Read on wp.org ↗
5. ★★★★★ Autistic PhD

   2.2y ago

   I’ve had a license for WP Extended since it was born, and I’ve enjoyed watching it grow in sophistication. I really like that it’s modular. This does things that I would normally have to deal with via code snippets or additional plugins. This plugin has become a part of my “new site base stack” – only possible because of the modularity and subsequent small footprint. Awesome tool. This topic was modified 1 year, 11 months ago by Autistic PhD. Reason: fixing typo

   Read on wp.org ↗
6. ★★★★★ Nishita Joshi

   2.3y ago

   WPExtended is a robust plugin that extends the functionality of WordPress with ease. It seamlessly integrates into the WordPress dashboard, offering a user-friendly interface that simplifies complex tasks. The plugin’s performance is commendable. Compatibility with other plugins and themes is generally excellent, ensuring smooth operation within diverse WordPress environments. Overall, WpExtended stands out for its reliability, versatility, and enhancement of WordPress capabilities, making it a valuable tool for both developers and non-technical users alike.

   Read on wp.org ↗
7. ★★★★★ Darshan Prajapat

   2.3y ago

   WP Extended is very easy to use and combines the functionality of many plugins into a single, convenient plugin.

   Read on wp.org ↗
8. ★★★★★ AlexGraphicD

   2.8y ago

   This is one of those rare exceptional plugins in the WordPress ecosystem. It is very promising and they have a generous number of features in the free version. I love the intuitive interface and the easy way to enable/disable the modules. It is installed on every single website I manage.

   Read on wp.org ↗

All 17 disclosed vulnerabilities are patched in the current version (3.3.0). Sites still on an older version should update.

1. Patched High · 8.8 The Ultimate WordPress Toolkit – WP Extended <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation via Menu Editor Module ↗
   2026-03-21 CVE-2026-4314 Improper Privilege Management Affects <= 3.2.4 Patched in 3.2.5
2. Patched Medium · 6.4 WP Extended <= 3.0.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload ↗
   2025-05-27 CVE-2025-4963 Improper Neutralization of Input During Web Page Generation Affects <= 3.0.15 Patched in 3.0.16
3. Patched Medium · 6.1 The Ultimate WordPress Toolkit – WP Extended <= 3.0.14 - Reflected Cross-Site Scripting ↗
   2025-03-27 CVE-2025-30796 Improper Neutralization of Input During Web Page Generation Affects <= 3.0.14 Patched in 3.0.15
4. Patched Medium · 5.3 The Ultimate WordPress Toolkit – WP Extended <= 3.0.13 - Missing Authorization to Unauthenticated Post Order Manipulation ↗
   2025-02-11 CVE-2024-13554 Missing Authorization Affects <= 3.0.13 Patched in 3.0.14
5. Patched High · 7.5 The Ultimate WordPress Toolkit – WP Extended <= 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module ↗
   2025-01-17 CVE-2024-13184 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.0.12 Patched in 3.0.13
6. Patched High · 7.4 The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
   2025-01-07 CVE-2024-11916 Missing Authorization Affects <= 3.0.11 Patched in 3.0.12
7. Patched High · 8.8 The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution ↗
   2025-01-07 CVE-2024-11816 Missing Authorization Affects <= 3.0.11 Patched in 3.0.12
8. Patched Medium · 6.1 The Ultimate WordPress Toolkit – WP Extended <= 3.0.9 - Reflected Cross-Site Scripting ↗
   2024-10-16 CVE-2024-9347 Improper Neutralization of Input During Web Page Generation Affects <= 3.0.9 Patched in 3.0.10
9. Patched Medium · 6.1 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting ↗
   2024-09-30 CVE-2024-47386 Improper Neutralization of Input During Web Page Generation Affects <= 3.0.8 Patched in 3.0.9
10. Patched Medium · 6.1 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via selected_option ↗
    2024-09-03 CVE-2024-8117 Improper Neutralization of Input During Web Page Generation Affects <= 3.0.8 Patched in 3.0.9
11. Patched High · 8.8 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Download ↗
    2024-09-03 CVE-2024-8104 Improper Limitation of a Pathname to a Restricted Directory Affects <= 3.0.8 Patched in 3.0.9
12. Patched Medium · 6.1 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via page ↗
    2024-09-03 CVE-2024-8119 Improper Neutralization of Input During Web Page Generation Affects <= 3.0.8 Patched in 3.0.9
13. Patched Medium · 6.5 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information Exposure ↗
    2024-09-03 CVE-2024-8106 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.0.8 Patched in 3.0.9
14. Patched High · 8.8 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Arbitrary Options Update ↗
    2024-09-03 CVE-2024-8102 Missing Authorization Affects <= 3.0.8 Patched in 3.0.9
15. Patched Medium · 5.4 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Insecure Direct Object Reference ↗
    2024-09-03 CVE-2024-8123 Authorization Bypass Through User-Controlled Key Affects <= 3.0.8 Patched in 3.0.9
16. Patched Medium · 5.4 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Missing Authorization to Admin Username Change ↗
    2024-09-03 CVE-2024-8121 Missing Authorization Affects <= 3.0.8 Patched in 3.0.9
17. Patched Medium · 6.1 The Ultimate WordPress Toolkit – WP Extended <= 2.4.7 - Unauthenticated Stored Cross-Site Scripting ↗
    2024-06-27 CVE-2024-37259 Improper Neutralization of Input During Web Page Generation Affects <= 2.4.7 Patched in 3.0.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 5 languages, 1 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-04-07 700+ → 600+ down after 112 days in tier
2. 2025-12-16 600+ → 700+ up after 2 days in tier
3. 2025-12-14 700+ → 600+ down after 75 days in tier
4. 2025-09-30 800+ → 700+ down after 5 days in tier
5. 2025-09-25 1K+ → 800+ down after 580 days in tier
6. 2024-02-23 900+ → 1K+ up after 46 days in tier
7. 2024-01-08 800+ → 900+ up after 4 days in tier
8. 2024-01-04 900+ → 800+ down after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for WP Extended – Modular WordPress Toolkit into a readme, a review or a deck. It updates itself.

WP Extended – Modular WordPress Toolkit: 600+ active installs, 4.9★ (28 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/wpextended