Skip to content
PluginCanary

WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager

by Syed Balkhi · 3,000,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 14 Oct 2026, fixed in 2.4.0.

86/ 100 Canary Score
Sub-scores for WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager
Ownership100
Maintenance100
Security80
Support57
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 14 Oct 2026, fixed in 2.4.0. Update to version 2.4.0 or later.14 Oct 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
deb2558 Mar 2017 to 8 Jul 2020, 18 commits
peterwilsoncc14 Oct 2020 to 12 Jul 2021, 7 commits
gripgrip4 May 2022 to 8 Oct 2026, 139 commits
mhshujon27 Aug 2026 to 29 Oct 2026, 4 commits

New committer mhshujon made a first commit on 27 Aug 2026.

Maintenance

Last release
6 days ago
Releases, 24 months
21
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter for WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager
Q1 20243
Q2 20244
Q3 20243
Q4 20244
Q1 20252
Q2 20252
Q3 20252
Q4 20253
Q1 20263
Q2 20261
Q3 20263
Q4 20262

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Support

57% of 7 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
14 Oct 2026WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager < 2.4.0 - Unauthenticated Snippet Safe Mode Bypass7.3< 2.4.02.4.00
26 May 2026WPCode <= 2.3.5 - Authenticated (Author+) Remote Code Execution via CPT Capability Bypass via XML-RPC wp.newPost8.8<= 2.3.52.3.60
17 Jul 2023WPCode <= 2.0.13 - Unauthenticated Reflected Cross-Site Scripting via Tag Filter Links6.1<= 2.0.132.0.13.10
3 Apr 2023WPCode <= 2.0.8 - Cross-Site Request Forgery4.7<= 2.0.82.0.90
9 Feb 2023WPCode <= 2.0.6 - Missing Authorization to Sensitive Key Disclosure/Update5.4<= 2.0.62.0.70

Source: Wordfence Intelligence.

Reputation

Average rating stayed at 5.0 between Q3 2026 and Q4 2026.

Rating distribution
5 star1842
4 star17
3 star6
2 star9
1 star43

Momentum

3,000,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager
4 May 202699,468
11 May 2026169,094
18 May 2026251,655
25 May 20261,066,093
1 Jun 2026294,849
8 Jun 2026235,095
15 Jun 2026196,790
22 Jun 2026175,508
29 Jun 2026876,123
6 Jul 2026451,686
13 Jul 2026216,021
20 Jul 2026916,902
27 Jul 2026286,845
3 Aug 2026360,576
10 Aug 2026187,003
17 Aug 2026185,710
24 Aug 2026935,510
31 Aug 2026335,924
7 Sep 2026223,379
14 Sep 2026283,745
21 Sep 2026200,285
28 Sep 2026162,255
5 Oct 2026904,467
12 Oct 2026316,337
19 Oct 2026264,709
26 Oct 20261,091,620
2 Nov 202673,874

Weekly downloads over the last 4 weeks are 10% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Shortcoder - Create Shortcodes for AnythingScore 92 · 100,000+FluentSnippets - High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code ManagerScore 92 · 50,000+Simple Custom CSS and JSScore 91 · 600,000+Insert Headers And FootersScore 91 · 200,000+Visual CSS Style EditorScore 91 · 30,000+

Facts

Version2.4.1
AuthorSyed Balkhi
Added12 Jul 2012
Last updated29 Oct 2026
Active installs3,000,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.0
CategoryDeveloper Tools & Customization > Code Snippets & Custom Code
Tagscss, php, code, header, code-snippets

Other plugins by this author: WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More, WP Mail SMTP by WPForms - SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & More, All in One SEO - AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights), Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead Generation, Duplicator - Backups & Migration Plugin - Cloud Backups, Scheduled Backups, & More, One Click Demo Import, Smash Balloon Social Photo Feed - Easy Social Feeds Plugin, Easy WP SMTP - WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more, Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery, WP Crontrol, PDF Embedder - PDF Viewer & Embed PDF Files for WordPress, WP Mail Logging

Questions

Is WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager still maintained?

WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager was last updated on 29 Oct 2026. Its Canary status is Healthy.

Is WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager safe?

WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager?

The wordpress.org author is Syed Balkhi. Recent committers: mhshujon, gripgrip, peterwilsoncc, deb255, n7studios. New committer mhshujon made a first commit on 27 Aug 2026.

What can I use instead of WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager?

Plugins in the same category with a higher Canary Score: Shortcoder - Create Shortcodes for Anything, FluentSnippets - High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code Manager, Simple Custom CSS and JS, Insert Headers And Footers, Visual CSS Style Editor.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue