Skip to content
PluginCanary

Custom CSS and JavaScript

by WP Zone · 10,000+ active installs · Checked 3 Nov 2026
Avoid2 Criticals1 Warning

Avoid: vulnerability published 6 Aug 2026 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39 while a vulnerability has no patch.

Sub-scores for Custom CSS and JavaScript
Ownership100
Maintenance0
Security35
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 6 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.20 Aug 2026Evidence
  • CriticalMNT-1No release in 27 months (last release 12 Aug 2024). Plan a replacement if the plugin is important to your site.12 Aug 2025Evidence
  • WarningMNT-2Tested up to WordPress 6.6.11, 5 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
hearken18 Dec 2015 to 12 Mar 2020, 54 commits
aspengrovestudios26 Feb 2021 to 5 Mar 2021, 4 commits
annaqq23 Aug 2021 to 12 Aug 2024, 11 commits

3 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
2 years ago
Releases, 24 months
0
Tested up to
6.6 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter for Custom CSS and JavaScript
Q1 20240
Q2 20240
Q3 20241
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 12 Aug 2024. Tested up to 6.6, 5 major versions behind WordPress 7.1.

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
6 Aug 2026Custom CSS and JavaScript <= 2.0.16 - Unauthenticated Information Exposure5.3<= 2.0.16No fixn/a

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Custom CSS and JavaScript
Q1 20245.0
Q2 20245.0
Q3 20245.0

Average rating stayed at 5.0 between Q1 2024 and Q3 2024.

Rating distribution
5 star54
4 star1
3 star0
2 star1
1 star4
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Custom CSS and JavaScript
4 May 202666
11 May 202692
18 May 202686
25 May 202686
1 Jun 202696
8 Jun 2026119
15 Jun 202691
22 Jun 202693
29 Jun 2026103
6 Jul 2026128
13 Jul 202688
20 Jul 2026111
27 Jul 2026123
3 Aug 2026136
10 Aug 2026145
17 Aug 2026129
24 Aug 2026147
31 Aug 2026131
7 Sep 2026133
14 Sep 2026167
21 Sep 2026183
28 Sep 2026178
5 Oct 2026187
12 Oct 2026151
19 Oct 2026303
26 Oct 2026250
2 Nov 202637

Weekly downloads over the last 4 weeks are 41% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Shortcoder - Create Shortcodes for AnythingScore 92 · 100,000+FluentSnippets - High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code ManagerScore 92 · 50,000+Simple Custom CSS and JSScore 91 · 600,000+Insert Headers And FootersScore 91 · 200,000+Visual CSS Style EditorScore 91 · 30,000+

Facts

Version2.0.16
AuthorWP Zone
Added18 Dec 2015
Last updated12 Aug 2024
Active installs10,000+
Requires WordPress3.5
Tested up to6.6.11
Requires PHPnot stated
CategoryDeveloper Tools & Customization > Code Snippets & Custom Code
Tagsstyles, custom css, javascript, stylesheet, custom javascript

Other plugins by this author: Shortcodes for Divi, Replace Image, WP Layouts, WP and Divi Icons, Potent Donations for WooCommerce, Password Strength for WooCommerce, Automatically Update Permalinks, Connect SendGrid for Emails, Disable User Registration Notification Emails, Stock Export and Import for WooCommerce, Force Update Check for Plugins and Themes, WP Squish

Questions

Is Custom CSS and JavaScript still maintained?

Custom CSS and JavaScript was last updated on 12 Aug 2024. Its Canary status is Avoid.

Is Custom CSS and JavaScript safe?

Custom CSS and JavaScript has 1 published vulnerability with no patched version. Its Canary status is Avoid.

Who owns Custom CSS and JavaScript?

The wordpress.org author is WP Zone. Recent committers: annaqq, aspengrovestudios, hearken, plugin-master. We have recorded no ownership change.

What can I use instead of Custom CSS and JavaScript?

Plugins in the same category with a higher Canary Score: Shortcoder - Create Shortcodes for Anything, FluentSnippets - High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code Manager, Simple Custom CSS and JS, Insert Headers And Footers, Visual CSS Style Editor.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue