Code Snippets

90 Quality Score

Active Installs

27/30

With 1 million active installs, Code Snippets has broad adoption across the WordPress community, though it trails category leader WPCode at 3 million installs.

Update Freshness

25/25

The plugin was updated recently and is tested against the latest WordPress 6.9.4, signalling an actively maintained project with a current compatibility baseline.

User Rating

14/15

A 94 out of 100 rating across 504 user reviews indicates consistently positive feedback from the community.

Support Health

9/15

Only 5 support threads exist in the tracked window, which makes the 100 percent resolution rate statistically thin and suggests low support volume rather than exceptional support quality.

WP Compatibility

15/15

Compatibility scores perfectly because the plugin supports PHP 7.4 and WordPress 5.0 or higher, covering a wide range of hosting environments in current use.

Scores higher than 99% of indexed plugins

About

An easy, clean, and simple way to enhance your site with code snippets.

Active Installs 1M+

Rating ★★★★½ 4.7/5

Last Updated 2026-09-02 7:31am GMT

Requires WordPress 5.5+

Tested Up To 7.1

Requires PHP 7.4+

Security History

7 known vulnerabilities, all patched

2 High 5 Medium

Most recent: February 5, 2026

View details ▸

Code Snippets <= 3.9.4 - Cross-Site Request Forgery to Cloud Snippet Download/Update Actions Medium

February 5, 2026 Patched in ["3.9.5"] CVE-2026-1785

Code Snippets <= 3.9.1 - Authenticated (Contributor+) PHP Code Injection via extract() and PHP Filter Chains High

November 18, 2025 Patched in ["3.9.2"] CVE-2025-13035

Code Snippets <= 3.5.0 - Cross-Site Request Forgery via load Medium

November 6, 2023 Patched in ["3.6.0"] CVE-2023-47666

Code Snippets <= 2.14.3 - Reflected Cross-Site Scripting Medium

May 18, 2022 Patched in ["2.14.4"] CVE-2022-25617

Code Snippets <= 2.14.2 - Reflected Cross-Site Scripting Medium

December 27, 2021 Patched in ["2.14.3"] CVE-2021-25008

Code Snippets <= 2.13.3 - Cross-Site Request Forgery to Remote Code Execution High

January 29, 2020 Patched in ["2.14.0"] CVE-2020-8417

Code Snippets < 2.7.0 - Reflected Cross-Site Scripting Medium

July 24, 2016 Patched in ["2.7.0"]

What It Does

Code Snippets lets you add PHP, CSS, HTML, or JavaScript to your WordPress site through a dedicated admin interface, without editing your theme's functions.php file. Each snippet is stored in the WordPress database and can be activated, deactivated, or exported independently, making it safer and cleaner than pasting code directly into theme files.

Who It's For

This plugin is a strong fit for site owners, freelancers, and developers who regularly add small customizations like custom post types, shortcodes, or admin tweaks and want a safer alternative to editing functions.php. It also suits multisite administrators who need snippet control across a network, since the plugin carries a multisite tag.

Who Should Skip It

If you only need to inject a single analytics script or pixel into your header or footer, a lighter one-purpose plugin like Head & Footer Code is faster and simpler. Beginners with no PHP knowledge will also get little value here, since each snippet requires actual code to be useful.

The Bottom Line

Code Snippets is a mature, well-maintained, and widely trusted plugin that delivers exactly what its name promises: a clean way to run PHP and other code snippets outside your theme. Its main limitation is the very low public support volume, so if you rely on active community forums for troubleshooting, WPCode may be a safer bet given its larger install base. For everyone else, this remains a solid, focused choice.

Pick WPCode if you want a higher overall score, 3 million installs, and a broader built-in snippet library with conditional logic for non-developers.

User Switching 86/100

This is a different tool entirely, focused on switching between user accounts for testing, so it only applies if your workflow requires rapid account swapping.

Head & Footer Code 85/100

Choose Head & Footer Code if you only need to drop tracking pixels, meta tags, or analytics scripts into specific page areas without managing PHP snippets.

Shortcoder — Create Shortcodes for Anything 85/100

Shortcoder is a better match if your main need is wrapping reusable HTML, ads, or content blocks inside shortcodes rather than running PHP code.

Blocks Animation: CSS Animations for Gutenberg Blocks 84/100

Blocks Animation serves a narrower purpose of adding CSS animations to Gutenberg blocks, so it only replaces Code Snippets if animation is your sole use case.