CSS & JavaScript Toolbox

80 Quality Score

Active Installs

18/30

With 10,000 active installs and a score of 60/30, this plugin has a modest user base, far smaller than the top alternatives like WPCode (3 million installs).

Update Freshness

25/25

Updated on October 28, 2025 and tested against WordPress 6.8.5, the maintenance signal is strong at 85/25.

User Rating

14/15

A 94/100 rating from 85 users is excellent, though the small sample size limits how much weight that score should carry.

Support Health

8/15

Zero support threads opened and zero resolved gives a support health of 50/15, which is unusual and suggests either very few issues or low engagement from the developer in the support forums.

WP Compatibility

15/15

Requiring WordPress 5.0 and PHP 7.4 is broadly compatible, earning 75/15, though the PHP floor rules out sites still on 7.3 or earlier.

Scores higher than 78% of indexed plugins

About

Add CSS, JavaScript, PHP and HTML code snippets to your site.

Active Installs 10k+

Rating ★★★★½ 4.8/5

Last Updated 2026-08-26 3:02pm GMT

Requires WordPress 5.0+

Tested Up To 7.0.4

Requires PHP 7.4.0+

Security History

6 known vulnerabilities, all patched

1 High 5 Medium

Most recent: September 24, 2026

View details ▸

CSS & JavaScript Toolbox <= 12.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via cjtoolbox Shortcode Medium

September 24, 2026 Patched in ["12.0.7"] CVE-2025-14814

CSS & JavaScript Toolbox <= 12.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Assignment Engine Fields Medium

September 17, 2026 Patched in ["12.0.7"] CVE-2025-13533

CSS & JavaScript Toolbox <= 12.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

October 31, 2025 Patched in ["12.0.6"] CVE-2025-11928

CSS & JavaScript Toolbox < 12.0.3 - Authenticated (Subscriber+) Local File Inclusion High

July 22, 2025 Patched in ["12.0.3"] CVE-2025-3703

CSS & JavaScript Toolbox <= 11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode Medium

December 19, 2023 Patched in ["11.9"] CVE-2023-50823

CSS & JavaScript Toolbox <= 8.4.1 - Information Exposure Medium

December 8, 2018 Patched in ["8.4.2"]

What It Does

CSS & JavaScript Toolbox lets you inject custom CSS, JavaScript, PHP, and HTML code into your WordPress site through a dedicated management interface rather than editing theme files directly. It organizes snippets by location (header, footer, specific pages) so you can add tracking scripts, style overrides, or functional PHP without writing into functions.php or using a child theme.

Who It's For

This plugin fits site owners comfortable with code who want a centralized place to manage multiple snippets across a single site without touching theme files. It is most useful for developers or technically inclined users maintaining custom functionality on a specific project, not for those running large multisite networks.

Who Should Skip It

If you are not comfortable reading or writing PHP and JavaScript, skip this plugin and use a no-code alternative like WPCode's snippet library or SeedProd. Users looking for a simple header/footer script injector will also find lighter tools that do less.

The Bottom Line

CSS & JavaScript Toolbox is a capable code injection plugin with strong recent maintenance and a high user rating, but its modest install count, empty support forum, and an overall quality score of 72.15/100 place it well behind WPCode and Code Snippets. It is a reasonable pick for a developer who likes its specific interface, but most users will get more value and a larger community from the alternatives.

Pick WPCode if you want a much larger install base (3 million), a built-in snippet library, and conditional logic that CSS & JavaScript Toolbox lacks.

Code Snippets 88/100

Pick Code Snippets if you mainly need to run PHP snippets site-wide with a familiar code editor and 1 million installs of social proof.

Header and Footer Scripts 85/100

Pick Header and Footer Scripts if you only need to drop scripts into the head or footer and want a lighter, more focused tool.

Head & Footer Code 85/100

Pick Head & Footer Code if you want a minimal script injector with 100,000 installs and a very narrow feature scope.

Shortcoder — Create Shortcodes for Anything 85/100

Pick Shortcoder if your real goal is wrapping HTML or JavaScript output inside shortcodes rather than managing code snippets by location.