Enable CORS
View on WordPress.orgScores higher than 26% of indexed plugins
About
Please read the plugin description before installing to ensure compatibility and avoid potential issues. This plugin will be free forever.
Security History
What It Does
Enable CORS adds Cross-Origin Resource Sharing headers to your WordPress site's HTTP responses, allowing browsers to permit requests from external domains, origins, or applications. In practice, it solves problems where JavaScript on a different domain cannot fetch data, submit forms, or call your WordPress REST API because the browser blocks the request. It is a small utility plugin aimed at a specific server configuration task rather than a feature-rich CORS management suite.
Who It's For
This plugin is best for developers or technical site owners running headless WordPress setups, mobile app backends, or any site that exposes its REST API to third-party frontends, SaaS platforms, or partner domains. It suits users who understand what CORS means and just want a quick, free way to enable the necessary response headers without editing .htaccess or writing custom code. It is also useful for teams prototyping cross-domain integrations who need a fast, low-commitment solution.
Who Should Skip It
If your site only serves content to its own domain or you do not have any cross-origin AJAX or API requests, you do not need this plugin at all. Developers comfortable editing .htaccess, nginx config, or adding a few lines to functions.php can also skip it, since the underlying CORS headers are trivial to set without a plugin.
The Bottom Line
Enable CORS does a narrow job and appears to do it competently, with strong maintenance and compatibility signals offsetting thin ratings and no visible support track record. With only 3 ratings and a 71.08 overall quality score, it is a reasonable pick for developers who want a lightweight, no-cost solution, but anyone uncomfortable with the lack of community validation should consider setting CORS headers manually instead. The plugin is functional, not exceptional.
Related Plugins
Pick YMC Filter instead if your real need is advanced AJAX-based filtering of posts or products rather than CORS header management, since it scores notably higher overall.
zipaddr-jp is not a CORS alternative but illustrates a much higher-install plugin in the broader ajax tag, useful if you are browsing popular ajax-tagged tools.
Choose SearchWP Live Ajax Search if you actually need live search-as-you-type behaviour on the front end rather than CORS headers for cross-origin requests.
Relevanssi Live Ajax Search is a better fit when you want AJAX-powered search results and already use Relevanssi, not when you are solving a CORS problem.
Fatal Error Notify shares the same install count but solves a completely different problem (alerts on PHP fatal errors), so it is only relevant if monitoring is your real concern.