/ Plugin Category

/ Developer Tools & Customization

/ Code Snippets & Custom Code

/ Add Code To Head

Add Code To Head

By salubrio

Developer Tools & Customization / Code Snippets & Custom Code

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

Add Code To Head Review - In-Depth Analysis

Easily add custom JavaScript, HTML, or CSS to your site's header without template edits. Perfect for verification codes.

Performance Overview

WPS Score

6.81/10

User Rating

5/5 (based on 2+ reviews)

Active Installations

3,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

5 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

This plugin is designed for template designers, developers, and admins who need to add custom HTML to the header of each page.

It allows you to quickly insert verification codes for services like Mailchimp or Google without editing your site's template. This is particularly useful for those who want to make small changes without creating a child template.

By using this plugin, you can add custom CSS, links to external JavaScript files, or other elements without worrying about losing changes during template updates.

Comparing to Alternatives

Add Code To Head is a straightforward plugin designed for inserting code snippets into the head section of WordPress sites. It competes with several similar plugins that offer code insertion and customization features.

Top alternatives

Strengths

Simple and effective for adding code to the head section
High user satisfaction with flawless operation
Lightweight with no unnecessary features
Free to use with no paid version needed

Weaknesses

Had a medium severity stored XSS vulnerability fixed in version 1.23
Limited to adding code only to the head section
No advanced code management or snippet organization features
No pro version with extended capabilities

User Sentiment Analysis

With a perfect 5-star rating from all users and no negative reviews, the sentiment is overwhelmingly positive. Users appreciate the plugin's reliability and simplicity.

Positive highlights

"works perfectly" - neerav
"Works flawlessly" - overneathe

Common complaints

Weaknesses

Past security vulnerability requiring update
Limited functionality focused solely on head code insertion
Lack of advanced features compared to some alternatives

Who Should Use This?

Best for

Users who need a simple, reliable plugin to add code snippets specifically to the head section of their WordPress site without extra features.

Not ideal for

Users seeking advanced code snippet management, multi-location code insertion, or those concerned about past security issues may prefer more feature-rich or actively maintained alternatives.

Pricing & Value

Free version includes

The free version includes all necessary features to add code snippets to the head section effectively, with no restrictions.

Final Verdict

Add Code To Head is a highly rated, straightforward plugin ideal for users needing to insert code into the head section of their WordPress site. Its simplicity and flawless operation make it a solid choice for basic needs without cost.

However, users should be aware of a past medium-severity security vulnerability that has been fixed, and those requiring more advanced features or broader code insertion options might consider alternative plugins.

Other Notable Features

Here are a few other notable features of this free Add Code To Head plugin.

custom code

header scripts

HTML CSS JavaScript

Screenshots

FAQ

The plugin now normalizes and sanitizes saved head code for users who do not have the unfiltered_html capability before it is stored, closing the stored XSS vector described in CVE-2025-48314 for untrusted roles. Site owners who intentionally grant unfiltered_html (such as administrators on single-site installs) still bypass this sanitization by design so they can insert arbitrary code.

Bottom line: the vulnerability of executing arbitrary code in the admin screens should be eliminated, however the functionality exists for public pages and is intentional. Only advanced users who know what they are doing should use this plugin.