Extra Shortcodes
Avoid: vulnerability published 31 Dec 2025 still has no fix after 14 days.
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 35 |
| Support | 70 |
| Reputation | 70 |
Quick answers
- Is Extra Shortcodes still maintained?
- No. Last release 13 Apr 2023, over 3 years ago. 13 Apr 2023 · wordpress.org
- Who owns Extra Shortcodes, and has it changed hands?
- No change recorded. 3 Nov 2026 · SVN log
- Was Extra Shortcodes removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is Extra Shortcodes safe?
- No. 1 known vulnerability has no fix in the current version. 31 Dec 2025 · Wordfence Intelligence
- Is the latest Extra Shortcodes update safe to install?
- No ownership change before 2.2. No one-star spike after it. 11 Jan 2016 · Release history
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 31 Dec 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.14 Jan 2026Evidence
- CriticalMNT-1No release in 43 months (last release 13 Apr 2023). Plan a replacement if the plugin is important to your site.12 Apr 2024Evidence
- WarningMNT-2Tested up to WordPress 6.2.15, 9 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| webvitaly | 8 Jan 2012 to 13 Apr 2023, 21 commits |
|---|
1 committer recorded. No ownership change since 2012.
Maintenance
- Last release
- 4 years ago
- Releases, 24 months
- 0
- Tested up to
- 6.2 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 13 Apr 2023. Tested up to 6.2, 9 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 4.1.
| 5 star | 7 |
|---|---|
| 4 star | 1 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 2 |
Security record
1 vulnerability in 24 months, 1 with no fix in the current version.
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 31 Dec 2025 | Extra Shortcodes <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 2.2 | No fix | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 17 |
|---|---|
| 11 May 2026 | 23 |
| 18 May 2026 | 16 |
| 25 May 2026 | 30 |
| 1 Jun 2026 | 22 |
| 8 Jun 2026 | 30 |
| 15 Jun 2026 | 20 |
| 22 Jun 2026 | 14 |
| 29 Jun 2026 | 17 |
| 6 Jul 2026 | 16 |
| 13 Jul 2026 | 18 |
| 20 Jul 2026 | 26 |
| 27 Jul 2026 | 27 |
| 3 Aug 2026 | 35 |
| 10 Aug 2026 | 35 |
| 17 Aug 2026 | 35 |
| 24 Aug 2026 | 28 |
| 31 Aug 2026 | 35 |
| 7 Sep 2026 | 35 |
| 14 Sep 2026 | 48 |
| 21 Sep 2026 | 43 |
| 28 Sep 2026 | 42 |
| 5 Oct 2026 | 47 |
| 12 Oct 2026 | 44 |
| 19 Oct 2026 | 68 |
| 26 Oct 2026 | 83 |
| 2 Nov 2026 | 11 |
Weekly downloads over the last 4 weeks are 61% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 2.2 |
|---|---|
| Author | webvitalii |
| Added | 8 Jan 2012 |
| Last updated | 13 Apr 2023 |
| Active installs | 1,000+ |
| Requires WordPress | 3.0 |
| Tested up to | 6.2.15 |
| Requires PHP | not stated |
| Category | Content Management > Blog & Article Publishing |
| Tags | archive, archives, category, shortcode, shortcodes |
Other plugins by this author: iframe, Page-list, Filenames to latin, Sitekit, Login-Logout, Taxonomy Checklist Tree, Security-Protection, Search by Google, info, Comments-advanced, Easy-to-use, Ip2country
Questions
Is Extra Shortcodes still maintained?
No. Last release 13 Apr 2023, over 3 years ago.
Who owns Extra Shortcodes, and has it changed hands?
No change recorded.
Was Extra Shortcodes removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is Extra Shortcodes safe?
No. 1 known vulnerability has no fix in the current version.
Is the latest Extra Shortcodes update safe to install?
No ownership change before 2.2. No one-star spike after it.