Skip to content
PluginCanary

CSS & JavaScript Toolbox

by wipeoutmedia · 10,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 24 Sep 2026, fixed in 12.0.7.

85/ 100 Canary Score
Sub-scores for CSS & JavaScript Toolbox
Ownership100
Maintenance100
Security75
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 24 Sep 2026, fixed in 12.0.7. Update to version 12.0.7 or later.24 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 17 Sep 2026, fixed in 12.0.7. Update to version 12.0.7 or later.17 Sep 2026Evidence
  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
wipeoutmedia19 Sep 2011 to 26 Aug 2026, 169 commits
xpointer26 Mar 2013 to 12 Dec 2018, 65 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
2 months ago
Releases, 24 months
5
Tested up to
7.0 vs 7.1
Requires PHP
7.4.0 supported 8.2+
Releases per quarter for CSS & JavaScript Toolbox
Q1 20242
Q2 20240
Q3 20243
Q4 20240
Q1 20250
Q2 20251
Q3 20251
Q4 20252
Q1 20260
Q2 20260
Q3 20261
Q4 20260

Last release 26 Aug 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
24 Sep 2026CSS & JavaScript Toolbox <= 12.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via cjtoolbox Shortcode6.4<= 12.0.612.0.70
17 Sep 2026CSS & JavaScript Toolbox <= 12.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Assignment Engine Fields4.4<= 12.0.612.0.70
31 Oct 2025CSS & JavaScript Toolbox <= 12.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 12.0.512.0.60
22 Jul 2025CSS & JavaScript Toolbox < 12.0.3 - Authenticated (Subscriber+) Local File Inclusion7.5< 12.0.312.0.30
19 Dec 2023CSS & JavaScript Toolbox <= 11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode6.4<= 11.811.927
8 Dec 2018CSS & JavaScript Toolbox <= 8.4.1 - Information Exposure5.8<= 8.4.18.4.25

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.8 from 84 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star76
4 star2
3 star2
2 star2
1 star2
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for CSS & JavaScript Toolbox
4 May 2026145
11 May 2026272
18 May 2026241
25 May 2026239
1 Jun 2026244
8 Jun 2026242
15 Jun 2026207
22 Jun 2026198
29 Jun 2026198
6 Jul 2026210
13 Jul 2026194
20 Jul 2026175
27 Jul 2026228
3 Aug 2026250
10 Aug 2026259
17 Aug 2026209
24 Aug 20263,716
31 Aug 2026856
7 Sep 2026561
14 Sep 20261,154
21 Sep 2026816
28 Sep 2026448
5 Oct 2026463
12 Oct 2026385
19 Oct 2026612
26 Oct 2026508
2 Nov 202666

Weekly downloads over the last 4 weeks are 19% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Shortcoder - Create Shortcodes for AnythingScore 92 · 100,000+FluentSnippets - High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code ManagerScore 92 · 50,000+Simple Custom CSS and JSScore 91 · 600,000+Insert Headers And FootersScore 91 · 200,000+Visual CSS Style EditorScore 91 · 30,000+

Facts

Version12.0.7
Authorwipeoutmedia
Added19 Sep 2011
Last updated26 Aug 2026
Active installs10,000+
Requires WordPress5.0
Tested up to7.0.8
Requires PHP7.4.0
CategoryDeveloper Tools & Customization > Code Snippets & Custom Code
Tagsphp, code, scripts, snippets, javascript

Questions

Is CSS & JavaScript Toolbox still maintained?

CSS & JavaScript Toolbox was last updated on 26 Aug 2026. Its Canary status is Healthy.

Is CSS & JavaScript Toolbox safe?

CSS & JavaScript Toolbox has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns CSS & JavaScript Toolbox?

The wordpress.org author is wipeoutmedia. Recent committers: wipeoutmedia, xpointer, ivanweb, plugin-master. We have recorded no ownership change.

What can I use instead of CSS & JavaScript Toolbox?

Plugins in the same category with a higher Canary Score: Shortcoder - Create Shortcodes for Anything, FluentSnippets - High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code Manager, Simple Custom CSS and JS, Insert Headers And Footers, Visual CSS Style Editor.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue