Just TinyMCE Custom Styles
Avoid: vulnerability published 8 Dec 2025 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 35 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 8 Dec 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.22 Dec 2025Evidence
- CriticalMNT-1No release in 75 months (last release 14 Aug 2020). Plan a replacement if the plugin is important to your site.14 Aug 2021Evidence
- WarningMNT-2Tested up to WordPress 5.5.24, 16 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| aprokopenko | 20 Jul 2016 to 14 Aug 2020, 14 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 6 years ago
- Releases, 24 months
- 0
- Tested up to
- 5.5 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 14 Aug 2020. Tested up to 5.5, 16 major versions behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 8 Dec 2025 | Just TinyMCE Custom Styles <= 1.2.1 - Cross-Site Request Forgery | 4.3 | <= 1.2.1 | No fix | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.8 from 6 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 5 |
|---|---|
| 4 star | 1 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 9 |
|---|---|
| 11 May 2026 | 17 |
| 18 May 2026 | 19 |
| 25 May 2026 | 34 |
| 1 Jun 2026 | 22 |
| 8 Jun 2026 | 23 |
| 15 Jun 2026 | 20 |
| 22 Jun 2026 | 23 |
| 29 Jun 2026 | 21 |
| 6 Jul 2026 | 20 |
| 13 Jul 2026 | 15 |
| 20 Jul 2026 | 31 |
| 27 Jul 2026 | 28 |
| 3 Aug 2026 | 39 |
| 10 Aug 2026 | 35 |
| 17 Aug 2026 | 44 |
| 24 Aug 2026 | 29 |
| 31 Aug 2026 | 30 |
| 7 Sep 2026 | 38 |
| 14 Sep 2026 | 49 |
| 21 Sep 2026 | 53 |
| 28 Sep 2026 | 48 |
| 5 Oct 2026 | 46 |
| 12 Oct 2026 | 52 |
| 19 Oct 2026 | 69 |
| 26 Oct 2026 | 93 |
| 2 Nov 2026 | 17 |
Weekly downloads over the last 4 weeks are 69% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.2.1 |
|---|---|
| Author | Alex Prokopenko / JustCoded |
| Added | 20 Jul 2016 |
| Last updated | 14 Aug 2020 |
| Active installs | 1,000+ |
| Requires WordPress | 4.3 |
| Tested up to | 5.5.24 |
| Requires PHP | not stated |
| Category | Design & Themes > Themes & Templates |
| Tags | editor, styles, tinyMCE, link class, custom-styles |
Other plugins by this author: Just Responsive Images, Just Image Optimizer, Just Post Preview Widget, Just Headline
Questions
Is Just TinyMCE Custom Styles still maintained?
Just TinyMCE Custom Styles was last updated on 14 Aug 2020. Its Canary status is Avoid.
Is Just TinyMCE Custom Styles safe?
Just TinyMCE Custom Styles has 1 published vulnerability with no patched version. Its Canary status is Avoid.
Who owns Just TinyMCE Custom Styles?
The wordpress.org author is Alex Prokopenko / JustCoded. Recent committers: aprokopenko, plugin-master. We have recorded no ownership change.
What can I use instead of Just TinyMCE Custom Styles?
Plugins in the same category with a higher Canary Score: Black Studio TinyMCE Widget, AddQuicktag, Classic Editor +, Classic Editor and Classic Widgets, Re-Add Text Justify Button.