WPMasterToolKit (WPMTK) – All in one plugin
by Ludwig You · Admin & Utilities
Also makes 6 other plugins · 14.8K+ installs across the portfolio →
Modular WordPress toolkit for security, performance, SMTP, WebP images, code snippets, redirects, administration and more.
Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.
Health
A 88/100
no flags
Active installs
5K+
≈5.3K estimated
Momentum
+57%
downloads vs prior 30d
Biggest opportunity: Swap “admin”, “security” and “disable features” for “xmlrpc”, “administration” and “shortlink”. “admin” isn't earning its slot: you're not in the first 24 results for its own search. “xmlrpc” sits at #6 untagged, close enough for a declared tag to move it up. “security” isn't earning its slot: you're not in the first 24 results for its own search. “administration” sits at #7 untagged, close enough for a declared tag to move it up. “disable features” isn't earning its slot: it only gets you to #23. “shortlink” sits at #24 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.
88 health vs 56 average across 5,896 Admin & Utilities plugins
Install conversion
How it's measured →6.4%
of downloads still active
At least 5K of 78.6K lifetime downloads are still running, above its category: the median Admin & Utilities plugin keeps 0.6%, across 4,187 plugins.
Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Admin & Utilities plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.
This plugin shipped 22 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.
Details
Directory ranking optimization
How it's scored →How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.
Excellent listing optimization
Well tuned across the board
Updated 37 days ago
Tested up to WordPress 7.1.4, the current branch or newer
5.0★ over 28 reviews, smoothed to 4.42★
5 of 5 tags set · short description in place
1 of 1 support threads resolved in the last 2 months
Search visibility
How it's tracked →Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.
35
Momentum
Losing ground
-0.8
Velocity
places per keyword, 28d
16%
Breadth
of keywords climbing, 28d
-0.5
Acceleration
recent half vs earlier
wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.
| Keyword | wp.org | On merit | wp.org move, 90 days |
|---|---|---|---|
| administration | #7 | #8 | down 2 |
| all in one plugin your tag | #10 | #15 | up 1 |
| xmlrpc | #6 | #6 | up 1 |
| modular | #14 | #15 | up 1 |
| all in one | #19 | #16 | down 4 |
| easy to use your tag | #23 | #24 | down 8 |
| disable features your tag | #23 | #16 | 0 |
| menu organizer | #13 | #11 | 0 |
| shortlink | #24 | #20 | down 1 |
| features | #22 | #21 | down 9 |
| page administration | #23 | #20 | up 1 |
| admin your tag | Not in the top 24 | ||
| security your tag | Not in the top 24 | ||
232 searches this plugin appeared in over the last 90 days, 11 listed. 221 left out as unrelated or noise (years, numbers, stray words). 2 of its tags aren't in the top 24 for their own search.
What to do about it
- Swap “admin”, “security” and “disable features” for “xmlrpc”, “administration” and “shortlink”. “admin” isn't earning its slot: you're not in the first 24 results for its own search. “xmlrpc” sits at #6 untagged, close enough for a declared tag to move it up. “security” isn't earning its slot: you're not in the first 24 results for its own search. “administration” sits at #7 untagged, close enough for a declared tag to move it up. “disable features” isn't earning its slot: it only gets you to #23. “shortlink” sits at #24 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.
- Slipping on “easy to use”. Down 8 places since 2026-09-26, now #23. Check what shipped around then, and what moved above you.
Daily downloads
Since 24 Feb 2024 · 981 days · wp.org + Plugin Pulse archive
30-day downloads
Rolling 30-day volume · peak 9.6K · peaks are release surges
Directory rank vs rivals
wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you
Health trend
Composite health score, snapshotted daily
Update activity
How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.
Release cadence
Actively maintainedHow often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.
22
releases in the last 12 months
1mo ago
latest release · v2.25.0 · 24 Sep 2026
63
tagged releases on record
Recent releases
What its installed base runs
via wordpress.orgShare of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.
Estimated active installs
The public count shows “5K+”. Our estimate pins where the real number sits.
Crossed into this band 4 months ago; a band this size takes about a year or more to cross, which places it about 31% of the way through.
At the current install trend, crossing 6K+ in roughly 128 days.
Install history since 23 Feb 2024
Recent reviews
All reviews on wp.org ↗- ★★★★★ momo-fr3mo ago
The number of settings available in the free version is huge, covering a wide range of WordPress functions and services. Awesome!
Read on wp.org ↗ - ★★★★★ Tibow7mo ago
Bravo à Ludwig pour ce plugin qui fait des merveilles, et qui trouve place dans la plupart des projets WordPress que je réalise pour mes clients depuis quelques mois. 5 stars for you
Read on wp.org ↗ - ★★★★★ jeanedwa11mo ago
A+Excellent plugin! Now that it’s been verified again, it is working beautifully. I’ve replaced so many other plug-ins and actions… What a brilliant plug-in. I’d highly recommend it..!
Read on wp.org ↗ - ★★★★★ Spencer1.0y ago
After thoroughly testing for a few months, I have rolled out WPMT to all of the sites I build and manage for clients. It’s an indispensable tool for any WP developer or designer, and is a must-have in my opinion. One of my favorite modules is the media encoder that flawlessly converts images to WebP for the low price of zero! Add WPMT to your toolkit!
Read on wp.org ↗ - ★★★★★ Robin Labadie1.2y ago
This plugin saves me custom config and 2 to 6 plugins depending on websites. I’m using it more and more. It’s easy to use and efficient. I can only recommend! Thanks for the work
Read on wp.org ↗ - ★★★★★ Benjamin Pongy AXOME1.3y ago
Extension installée sur tous mes projets WP.La version gratuite couvre 99% de mes besoins. Bravo Ludwig !
Read on wp.org ↗ - ★★★★★ Aymeric Marquant1.3y ago
Plugin indispensable !
Read on wp.org ↗ - ★★★★★ jruiz151.5y ago
Très bon projet, simple et efficace en plus d’être très complet
Read on wp.org ↗
Latest updates
via wp.org changelogRecent releases and news for this plugin
- — Version 2.22.0 Update: Use AI Client API if the WordPress version support it Update: Module: Meta Debugger: Add support for WooCommerce product variations and display metadata for each variation directly from the variation editor. Fix: 2.22.0
- — Version 2.21.0 Add: Add a dedicated admin interface to browse, monitor, download, and clear plugin log files. Update: Module: Meta Debugger: Display metadata for each WooCommerce product variation directly from the variation editor. Up 2.21.0
- — Version 2.20.1 Tweak: Add a toggle button to switch between fullscreen and normal mode for better focus and usability when editing code snippets in various modules. Fix: SMTP Mailer: Fix redirect loop when using Gmail/Outlook integrati 2.20.1
- — Version 2.23.1 Security: Improve SVG file type validation in the SVG Upload module Security: Improve label alignment in custom content type templates Update: Pro Module: Password Expiration: Enhance login attempt logging and password e 2.23.1
- — Version 2.23.0 Add: Module: Social Login: Add social authentication with Google, configurable login button layouts, and WooCommerce login and registration compatibility. Add Apple, Facebook, GitHub, LinkedIn, Microsoft, X/Twitter, and 2.23.0
- — Version 2.23.2 Update: Module: Meta Debugger: Improve metadata display and error handling, and remove the json-view dependency. Fix: Module: Code Snippets: Improve generated PHP docblock formatting for multiline values and comment deli 2.23.2
Security history
via Wordfence IntelligenceAll 6 disclosed vulnerabilities are patched in the current version (2.25.0). Sites still on an older version should update.
- Patched Medium · 4.9 WPMasterToolKit (WPMTK) – All in one plugin <= 2.22.0 - Authenticated (Administrator+) SQL Injection ↗2026-09-17 CVE-2026-66624 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.22.0 Patched in 2.23.1
- Patched Medium · 5.3 WPMasterToolKit (WPMTK) <= 2.13.0 - Authenticated (Contributor+) Code Injection ↗2025-12-11 CVE-2025-14166 Improper Control of Generation of Code Affects <= 2.13.0 Patched in 2.13.1
- Patched High · 7.2 WPMasterToolKit (WPMTK) – All in one plugin <= 2.5.2 - Authenticated (Administrator+) to Arbitrary File Read and Write ↗2025-04-23 CVE-2025-3300 Improper Limitation of a Pathname to a Restricted Directory Affects <= 1.15.0 Patched in 2.6.0
- 2024-12-30 CVE-2024-56249 Unrestricted Upload of File with Dangerous Type Affects <= 1.13.1 Patched in 1.14.0
- 2024-12-30 CVE-2024-56248 Improper Limitation of a Pathname to a Restricted Directory Affects <= 1.13.1 Patched in 1.14.0
Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.
CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.
Behavioral tests
via WP HiveAutomated install-time checks, tested on PHP 8.1.12 · WP 7.0
Languages
via translate.wordpress.orgTranslated into 3 languages, 0 at 90% or more
AI assistants
How it's measured →Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.
Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.
Readme readiness
7 of 8 pass · checked 29 Oct 2026Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.
- ✓ Says what it does "Modular WordPress toolkit for security, performance, SMTP, WebP images, code snippets, redirects, administr..."
- ✓ Has a FAQ 24 questions in the FAQ.
- ✓ FAQ asks real questions 24 of 24 read like questions a user would type.
- ! Names who it is for One audience phrase ("built for"); say who the plugin is for and what they use it for.
- ✓ Names what it works with Mentions WooCommerce, Gutenberg, Brevo, REST API and 1 more.
- ✓ Headings and lists 6 headings and 1 list.
- ✓ Enough to quote 6,476 characters of description.
- ✓ Tags match the text 3 of 5 tags appear in the text; "all in one plugin", "Easy to use" do not.
Growth timeline
Install-tier crossings we have observed, and how long each tier took to outgrow
- 2026-07-10 4K+ → 5K+ up after 182 days in tier
- 2026-01-09 3K+ → 4K+ up after 132 days in tier
- 2025-08-30 2K+ → 3K+ up after 134 days in tier
- 2025-04-18 1K+ → 2K+ up after 76 days in tier
- 2025-02-01 900+ → 1K+ up after 18 days in tier
- 2025-01-14 800+ → 900+ up after 30 days in tier
- 2024-12-15 700+ → 800+ up after 18 days in tier
- 2024-11-27 600+ → 700+ up after 19 days in tier
Competes with
The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).
-
Loginizer 1M+ installs · 4.8★ · 2 shared tags A -
Admin Menu Editor 300K+ installs · 4.6★ · 2 shared tags A -
LWS Tools 10K+ installs · 4.3★ · 2 shared tags A -
Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 1 shared tag A -
Hostinger Tools 3M+ installs · 3.6★ · 1 shared tag B -
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) 3M+ installs · 4.9★ · 1 shared tag A
Embed this report card
Drop a live Pulse card for WPMasterToolKit (WPMTK) – All in one plugin into a readme, a review or a deck. It updates itself.
<iframe src="https://plugins.wpmayor.com/embed/wpmastertoolkit" width="480" height="300" style="border:0" loading="lazy" title="WPMasterToolKit (WPMTK) – All in one plugin — Plugin Pulse"></iframe> WPMasterToolKit (WPMTK) – All in one plugin: 5K+ active installs, 5.0★ (28 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/wpmastertoolkit
Spotted a number that looks wrong? Report a data issue and we'll check it against the source.