Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts

82 Quality Score

Active Installs

21/30

With 60,000 active installs, Woody sits in a comfortable middle tier, far behind category leaders like WPCode (3 million) but well ahead of most niche tools.

Update Freshness

25/25

A perfect maintenance score reflects an update within the past release cycle and a clearly maintained changelog, which is the strongest signal in the breakdown.

User Rating

14/15

A 90/100 rating from 221 reviews is strong and above average, though the smaller sample size means it is less statistically settled than ratings gathered from tens of thousands of users.

Support Health

8/15

Only 4 support threads with all 4 resolved looks great on paper, but the extremely low volume suggests either very few issues or very few users posting, so it is hard to read this as a confident signal either way.

WP Compatibility

15/15

Full marks for compatibility, with tested support up to WordPress 7.0 and a PHP 7.0 minimum that still covers the vast majority of hosting environments in 2026.

Scores higher than 88% of indexed plugins

About

Insert PHP, JavaScript, CSS, HTML, ads & tracking code into WordPress headers, footers, pages & content with conditional logic — no theme editing.

Active Installs 50k+

Rating ★★★★½ 4.5/5

Last Updated 2026-09-14 8:09am GMT

Requires WordPress 5.6+

Tested Up To 7.1

Requires PHP 7.0+

Security History

8 known vulnerabilities, all patched

1 Critical 3 High 4 Medium

Most recent: March 23, 2026

View details ▸

Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts <= 2.7.1 - Authenticated (Contributor+) Remote Code Execution High

March 23, 2026 Patched in ["2.7.2"] CVE-2026-25366

Woody code snippets – Insert Header Footer Code, AdSense Ads <= 2.5.0 -Authenticated (Contributor+) Remote Code Execution Critical

June 14, 2024 Patched in ["2.5.1"] CVE-2024-3105

Woody code snippets – Insert Header Footer Code, AdSense Ads <= 2.5.0 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

June 6, 2024 Patched in ["2.5.1"] CVE-2024-35751

Woody code snippets <= 2.4.5 - Reflected Cross-Site Scripting Medium

June 2, 2022 Patched in ["2.4.6"]

Woody code snippets <= 2.3.9 - Cross-Site Request Forgery Bypass Medium

September 16, 2020 Patched in ["2.3.10"] CVE-2020-36759

Woody Ad Snippets <= 2.2.8 - Authenticated Cross-Site Scripting Medium

September 13, 2019 Patched in ["2.2.9"] CVE-2019-16289

Woody Ad Snippets <= 2.2.5 - Arbitrary Post Deletion High

August 9, 2019 Patched in ["2.2.6"] CVE-2019-14773

Woody Ad Snippets <= 2.2.4 - Missing Authorization to Settings Import High

August 2, 2019 Patched in ["2.2.5"] CVE-2019-15858

What It Does

Woody Code Snippets lets you drop PHP, JavaScript, CSS, HTML, ads, and tracking pixels into your WordPress site's headers, footers, pages, and posts without touching theme files. It includes conditional logic so snippets can fire only on specific pages, post types, or user roles. Think of it as a safe scratchpad for small code edits that would otherwise require a child theme or a developer.

Who It's For

This is a good fit for site owners and small agencies who need to inject tracking pixels, ad scripts, or minor PHP snippets but do not want to edit functions.php or risk breaking their theme on the next update. It works well for affiliate blogs, e-commerce stores running custom analytics, and landing pages for SaaS or local service businesses where specific scripts need to fire on specific URLs.

Who Should Skip It

If you only need to paste a single Google Analytics or Facebook Pixel snippet once, a lighter dedicated header/footer plugin will do the job with less surface area. Developers maintaining complex custom functionality should stick with a proper code snippets manager or a child theme rather than spreading logic across a third-party plugin.

The Bottom Line

Woody Code Snippets is a solid, well-maintained utility that does its job without drama, earning an 82.4/100 overall quality score. It is not the category leader (WPCode scores 97.55 with 50 times the installs), so casual users will find more peace of mind there, but Woody remains a reasonable choice for sites already running it or for users who prefer its interface. The main caveat is the relatively small install base and thin support volume, which makes the long-term track record harder to verify than bigger competitors.

Pick WPCode if you want the same feature set with a far larger user base (3 million installs), a deeper snippet library, and more frequent updates from a well-funded team.

Code Snippets 88/100

Choose Code Snippets if your main need is reusable PHP functions run site-wide, since it is purpose-built for that workflow with a million installs and strong reviews.

Insert Headers And Footers 87/100

Go with Insert Headers And Footers if you literally only need to drop one or two scripts in the header or footer and want the simplest possible interface.

Simple Custom CSS and JS 87/100

Pick Simple Custom CSS and JS if your priority is adding custom CSS and JS to the frontend with editor syntax highlighting, and you do not need PHP execution.

Insert PHP Code Snippet 84/100

Choose Insert PHP Code Snippet if you want a near-identical feature set, slightly higher overall score (84.39), and similar install count but with a different UI preference.