WP-CORS
My use case is to allow content authors to write help pages in WordPress. This content is fetched and embedded into a single page application hosted on another domain.
Consider an alternative
WP-CORS shows warning signs in 2026 — compare the alternatives below before installing. It runs on 1K+ sites, is rated 2.3/5 and was last updated 3 years ago, and scores 26/100 on our health check.
- Low rating so far — 2.3/5 from only 3 reviews
- No update in 3 years
- Only tested up to WordPress 6.2 (latest is 7.1)
How does it stack up?
Side-by-side on installs, updates, ratings & support
Daily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where WP-CORS stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| ajax | >100 |
| cors | #32 |
| rest | >100 |
Version adoption
Share of active sites per release.
Rating breakdown
★★★★★★★★★★ 2.3 from 3 reviews
About WP-CORS
From the official readme · v0.2.2Description
My use case is to allow content authors to write help pages in WordPress.
This content is fetched and embedded into a single page application hosted on another domain.
AJAX requests to this site from another are typically disallowed by the browser’s security model.
To permit legitimate uses the requesting browser may include an Origin header containing its domain.
This plugin uses the Origin header to decide whether to allow the request or not.
Allowed domains can be specified in the plugin’s Settings page.
Installation
This section describes how to install the plugin and get it working.
- Upload the uncompressed contents of
wp-cors.zipto the/wp-content/plugins/directory - Activate the plugin through the ‘Plugins’ menu in WordPress
Frequently asked questions
Why do I need this plugin?
If you want to integrate content from your site to JavaScript applications running on other host domains (or allow other people to) then the CORS standard is a way to allow this.
What is the difference between CORS and JSONP?
CORS is more modern and more secure since it works with the browser’s same-origin policy and XmlHttpRequest objects rather than bypassing them.
Ok I’m sold, where can I read more about CORS?
You can find the CORS spec here: http://www.w3.org/TR/cors/ You can learn more about how to use CORS here: http://www.html5rocks.com/en/tutorials/cors/
How do I control which sites can integrate using CORS?
This plugin’s Settings page allows administrators to specify a comma separated list of allowed domains.
Changelog
0.2.2
Tested up to WordPress 6.2.2
Prevent cross-site script injection on Settings page (CVE-2022-47606).
Note this vulnerability may only be exploited if the user is already logged in with Admin privilege.
0.2.1
Tested up to WordPress 4.3
Minor fixes to avoid 404 on (unnecessary) files.
0.2.0
Publish on WordPress.org.
0.1.1
Stop debugging statements flooding the error log.
0.1.0
Initial proof of concept.
Screenshots
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best WP-CORS alternatives
All ajax plugins →
FAQ
WP-CORS: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Oct 2, 2026
Is WP-CORS free?
Yes. WP-CORS is free to download and use from the official WordPress.org plugin directory.
Is WP-CORS safe to use in 2026?
WP-CORS shows warning signs in 2026 — compare the alternatives below before installing. It runs on 1K+ sites, is rated 2.3/5 and was last updated 3 years ago, and scores 26/100 on our health check.
How many websites use WP-CORS?
WP-CORS is active on 1K+ WordPress websites and has been downloaded 41,043 times since it launched in October 2014. It was downloaded 277 times in the last 30 days.
Does WP-CORS work with WordPress 7.1?
WP-CORS is officially tested up to WordPress 6.2.13, while the latest release is 7.1.2. It may still work, but try it on a staging site first.
When was WP-CORS last updated?
The latest version, 0.2.2, was released on July 28, 2023 (3 years ago).
Who makes WP-CORS?
WP-CORS is developed and maintained by tstephenson.
What are the best alternatives to WP-CORS?
The most popular alternatives to WP-CORS are zipaddr-jp (50K+ installs), SearchWP Live Ajax Search (50K+ installs) and WP-Polls (40K+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
