Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way. Security & Risk Analysis
wordpress.org/plugins/advance-custom-htmlAdvance Custom HTML lets you write and display HTML, CSS, PHP, and other code snippets on WordPress with live preview and syntax highlighting.
Is Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way. Safe to Use in 2026?
Generally Safe
Score 100/100Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way. has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.
The 'advance-custom-html' plugin v2.0.4 exhibits a strong security posture based on the provided static analysis. All identified entry points (two AJAX handlers) appear to have authentication checks, and there are no REST API routes, shortcodes, or cron events that could be exploited. The code demonstrates good practices with 100% of SQL queries using prepared statements and all output being properly escaped. Furthermore, there are no identified dangerous functions, file operations, or external HTTP requests, and a nonce check is present. The absence of any recorded vulnerabilities in its history is also a positive indicator.
Key Concerns
- No explicit capability checks on entry points
- Bundled Freemius library may pose a risk
Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way. Security Vulnerabilities
Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way. Release Timeline
Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way. Code Analysis
Bundled Libraries
Output Escaping
Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way. Attack Surface
AJAX Handlers 2
WordPress Hooks 5
Maintenance & Trust
Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way. Maintenance & Trust
Maintenance Signals
Community Trust
Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way. Alternatives
Code Manager
code-manager
Write, test and deploy PHP, JavaScript, CSS and HTML code blocks from the WordPress dashboard.
Blocksolid Snippets
blocksolid-snippets
Snippets functionality with a custom post type, shortcode and optional Gutenberg block.
Vaaky Highlighter — Syntax Highlighter, Code Blocks, Line Numbers for Gutenberg
vaaky-highlighter
Lightweight syntax highlighter with code blocks, line numbers, copy-to-clipboard, and 35+ themes. A fast, free alternative to Prism for WordPress.
LumiCode Syntax Highlighter
lumicode-syntax-highlighter
Beautiful syntax highlighting for WordPress. Auto-detects 40+ languages, with copy buttons, line numbers, collapse, and a dark/light theme switcher.
tagmate.io — code snippet installer
tagmate-io-code-snippet-installer
tagmate.io plugin helps you easily install third-party code snippets on your website.
Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way. Developer Profile
124 plugins · 730K total installs
How We Detect Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way.
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/advance-custom-html/build/admin-dashboard.css/wp-content/plugins/advance-custom-html/build/admin-dashboard.js/wp-content/plugins/advance-custom-html/build/admin-dashboard.jsadvance-custom-html/build/admin-dashboard.css?ver=advance-custom-html/build/admin-dashboard.js?ver=HTML / DOM Fingerprints
data-info/wp-json/wp/v2/users/me