/ Plugin Category

/ Content Management

/ Blog & Article Publishing

/ WP Shortcodes Plugin — Shortcodes Ultimate

WP Shortcodes Plugin — Shortcodes Ultimate

By Vova

Content Management / Blog & Article Publishing

Reviewed by Abdul Hameid

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

WP Shortcodes Plugin — Shortcodes Ultimate Review - In-Depth Analysis

A comprehensive collection of visual components for your site. Use shortcodes in posts, widgets, and templates. Includes over 50 customizable shortcodes.

Performance Overview

WPS Score

7.32/10

User Rating

4.9/5 (based on 5925+ reviews)

Active Installations

400,000+

Update Frequency

Outstanding It is calculated using the weighted average of same category plugins.

Security Score

6.29 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

Shortcodes Ultimate is a huge collection of useful elements that you can use in the post editor, text widgets, or even in template files. It provides over 50 gorgeous shortcodes that make it easy to enhance your website's functionality.

With features like one-click shortcode insertion, live preview, and support for the Block Editor, this plugin seamlessly integrates with your theme and looks great on mobile devices. A custom CSS editor is included, making it developer-friendly with plenty of hooks and extensive documentation.

Included shortcodes range from posts display, accordions, buttons, lightboxes, to image carousels and columns, offering a must-have tool for creating layouts. You can get help through documentation, community support forums, or by opening a support ticket for Pro users.

Try Shortcodes Ultimate Pro risk-free for 30 days, protected by a no questions asked refund policy!

Comparing to Alternatives

Shortcodes Ultimate is one of the most established shortcode plugins on WordPress.org, competing against a range of lighter and more niche tools. Its long track record and huge install base set it apart, though its age also means a longer security history to weigh against newer, simpler alternatives.

Top alternatives

Strengths

Huge library of ready-made shortcodes covering buttons, boxes, carousels, and more
Long-standing reputation with nearly 6,000 ratings and a 4.9-star average
User-friendly shortcode inserter that simplifies content creation
Actively maintained with frequent updates and clear changelogs

Weaknesses

Long history of authenticated stored XSS vulnerabilities across many versions
Reliance on Freemius licensing SDK has drawn criticism from some users
Heavier feature set than some users may need compared to lightweight alternatives

User Sentiment Analysis

With 5,924 ratings and a 4.9/5 average, sentiment is overwhelmingly positive—93.3% of reviewers gave five stars, and only 1.3% left a 1 or 2-star rating. The recent reviews reinforce this, with many long-term users praising ease of use and reliability.

Positive highlights

"Works great. Easy to use, lots of easy-to-access easy-to-understand info about the many variations possible" — chiefsnake
"I've been using it for years now and still very happy" — kimvl
"This is a fantastic plugin, and most importantly, it is stable... it is up to date with security patches" — Tony Fitzpatrick80
"I've been using it for several years and it works very well" — Lee Jae Yong
"Have had no issues. Works!" — jjwp808

Common complaints

Reports of the developer being slow or unresponsive to support requests
A specific unresolved bug with embedding YouTube videos
Frustration that a security vulnerability introduced by an update was not patched quickly
Concerns about the Freemius licensing partner's professionalism

Weaknesses

A long list of 31 recorded vulnerabilities, including one critical (CVSS 10) code execution flaw in older versions
Repeated pattern of contributor-level stored XSS issues across many releases
At least one user reported delayed patching of a Wordfence-flagged vulnerability

Who Should Use This?

Best for

Site owners and developers who want a mature, feature-rich shortcode library with an easy visual inserter, and who are diligent about keeping plugins updated promptly. It suits multi-site users and agencies already familiar with its long track record.

Not ideal for

Security-conscious site owners who restrict update cycles or allow Contributor-level access, given the plugin's extensive history of authenticated stored XSS vulnerabilities. Those wanting a minimal, low-maintenance shortcode tool may prefer a lighter alternative.

Pricing & Value

Free version includes

The free version offers a substantial library of shortcodes—buttons, boxes, tabs, carousels, and more—along with a visual shortcode inserter, making it fully usable for most standard content needs without payment.

Pro version (39 - 149 USD / year)

A paid tier is offered via Freemius, typically unlocking premium templates, additional shortcode styling options, priority support, and extended customization features beyond the core free toolkit.

Final Verdict

Shortcodes Ultimate remains a highly rated, widely trusted plugin with strong user satisfaction reflected in its 4.9-star average and minimal negative feedback. Its extensive shortcode library and ease of use continue to win over long-term users, and most complaints center on isolated support and update-timing issues rather than core functionality.

However, its lengthy vulnerability history—including a critical past exploit and numerous stored XSS issues—means users should stay vigilant about updates and restrict Contributor-level access where possible. For those comfortable managing that risk, it remains a solid choice; more security-cautious users might weigh lighter alternatives instead.