WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Plugin: simple-embed-code (Used by 6,320 domains)

Code Embed

👤 David Artiss 📦 v2.5.2 🔗 Plugin Homepage

Code Embed allows you to embed code (JavaScript, CSS and HTML – it can’t be used for server-side code, such as PHP) in a post, without the content being changed by the editor. This is incredibly useful for embedding third-party scripts, etc. The plugin is used by many large sites, including Mozilla.

Key features include…

  • Add HTML or JavaScript to posts or pages – particularly useful for embedding videos!
  • Embed in widgets using the Widget Logic plugin
  • Global embedding allows you set up some code in one post or page and then access it from another
  • Modify the keywords or identifiers used for embedding the code to your own choice
  • Search for embedding code via a simple search option
  • Add a simple suffix to the embed code to convert videos to responsive output
  • Embed an external script directly using just the URL
  • And much, much more!

Iconography is courtesy of the very talented Janki Rathod.

Please visit the Github page for the latest code development, planned enhancements and known issues

Getting Started

To use this plugin, you need to have custom fields enabled on your site. If you’re using the block editor, you may need to switch this on first – please scroll down to the next section to learn how to do this. If you’re using the classic editor then you’ll find the custom fields at the bottom of the editor screen.

Although this plugin works for both posts and pages for simplicity I will simply refer to posts – bear in mind that pages work in the same way.

Once you have custom fields switched on, here’s how easy it is to use…

  1. Once you have the plugin installed start a new post.
  2. Scroll down to the bottom of the screen and look for the “Custom Fields” section.
  3. Under “Add New Custom Field” enter a name of CODE1 and your embed code as the value
  4. In your post content add {{CODE1}} where you wish the embed code to appear.

And that’s it – when the post viewed or previewed {{CODE1}} will be replaced with the code that you asked to be embedded.

This should get you started – for more information and advanced options please see below.. Alternatively, there’s a fantastic guide at Elftronix which I would recommend.

Using this plugin with the block editor (aka Gutenberg)

By default, custom fields are hidden inside the block editor but can be revealed.

  1. Edit or create a post
  2. Click the settings button (three dots) in the top, right-hand corner
  3. Go to Preferences
  4. Click the Panels tab
  5. You will find a button to toggle the ‘Custom Fields’ meta box – make sure this is toggled to “on”
  6. A button should appear titled “Enable & Reload” – you’ll need to click on that and wait for the page to reload before the custom fields will appear

Check out the screenshots for how the custom fields should look.

I can’t find the custom fields

For block editor users, I’m assuming you’ve done the above. For classic editor users, the custom fields should be present by default. In all cases they should appear at the bottom of the editor screen.

From version 2.4, anyone without the “unfiltered HTML” capability won’t be able to see custom fields, for added security. Please see the section “Custom Field Security”, below, for more details.

If none of the above applies then you may have a theme or plugin that removes this or may have a problem with your WordPress installation – you will need to try the usual diagnostics to try and resolve this, including requesting help on the WordPress support forum.

Please bear in mind that the custom fields functionality is part of WordPress so it would be greatly appreciated if you don’t give me poor reviews in this situation as, I say, this component is not part of this plugin but, by using it, keeps this plugin simple to use and bloat-free 🙂

The Code Embed Options Screen

Whilst in WP Admin, if you go to Settings -> Code Embed, you’ll be able to access the options that are available for this plugin.

Code embedding is performed via a special keyword that you must use to uniquely identify where you wish the code to appear. This consist of an opening identifier (some that that goes at the beginning), a keyword and then a closing identifier. You may also add a suffix to the end of the keyword if you wish to embed multiple pieces of code within the same post.

From this options screen you can specify the above identifier that you wish to use. By default the opening and closing identifiers are percentage signs and the keyword is CODE. During these instructions these will be used in all examples.

The options screen is only available to those that with a capability of able to manage options or greater. All the other Code Embed menu options are available to users with a capability to edit posts or greater.

How to Embed Code

To embed in a post you need to find the meta box under the post named “Custom Fields”. If this is missing you may need to add it by clicking on the “Screen Options” tab at the top of the new post screen.

Now create a new custom field with the name of your keyword – e.g. CODE. The value of this field will be the code that you wish to embed. Save this custom field.

Now, wherever you wish the code to appear in your post, simply put the full identifier (opening, keyword and closing characters). For example, {{CODE}}.

If you wish to embed multiple pieces of code within a post you can add a suffix to the keyword. So we may set up 2 custom fields named CODE1 and CODE2. Then in our post we would specify either {{CODE1}} or {{CODE2}} depending on which you wish to display.

Don’t forget – via the options screen you can change any part of this identifier to your own taste.

How to Embed Code from an External URL

If you specify a URL within your post, surrounded by your choice of identifiers, then the contents of the URL will be embedded within your post.

Obviously, be careful when embedding a URL that you have no control over, as this may be used to hijack your post by injecting, for example, dangerous JavaScript.

For example, using the default options you could embed the contents of a URL using the following method…

{{http://www.example.com/code.php}}

or

{{https://www.example.com/code.html}}

How to Use Global Embedding

You can also create global embeds – that is creating one piece of embed code and using it in multiple posts or pages.

To do this simply make reference to an already defined (but unique) piece of embed code from another post or page.

So, let’s say in one post you define a custom field named CODE1. You can, if you wish, place {{CODE1}} not just in that post but also in another and it will work.

However, bear in mind that the embed code name must be unique – you can’t have defined it in multiple posts otherwise the plugin won’t know which one you’re referring to (although it will report this and list the posts that it has been used in).

In the administration menu there is a sidebar menu named “Tools”. Under this is a sub-menu named “Code Search”. Use this to search for specific embed names and it will list all the posts/pages that they’re used on, along with the code for each.

Embedding in Widgets

Natively you cannot use the embed facilities within sidebar widgets. However, if you install the plugin Widget Logic then Code Embed has been set up to make use of this and add the ability.

  • Install Widget Logic and activate.
  • In Administration, select the Widgets page from the Appearance menu. At the bottom there will be a set of Widget Logic options.
  • Ensure Use ‘widget_content’ filter is ticked and press Save.

Although you cannot set up embed code within a widget you can make reference to it, for example by writing {{CODE1}} in the widget.

Responsive Output Conversion

Responsive output is where an element on a web page dynamically resizes depending upon the current available size. Most video embeds, for instance, will be a fixed size. This is fine if your website is also of a fixed size, however if you have a responsive site then this is not suitable.

Code Embed provides a simple suffix that can be added to an embed code and will convert the output to being responsive. This works best with videos.

To use, when adding the embed code onto the page, simply add _RES to the end, before the final identifier. For example, {{CODE1_RES}}. The _RES should not be added to the custom fields definition.

This will now output the embedded code full width, but a width that is dynamic and will resize when required.

If you don’t wish the output to be full width you can specify a maximum width by adding an additional _x on the end, where x is the required width in pixels. For example, {{CODE1_RES_500}} this will output CODE1 as responsive but with a maximum width of 500 pixels.

It should be noted that this is an experimental addition and will not work in all circumstances.

Embedding in excerpts

By default embed code will not appear in excerpts. However, you can switch this ability on via the Code Embed options screen. If you do this then the standard rules of excerpts will still apply, but now once the code embed has applied – for example, excerpts are just text, a specific length, etc.

Filtering of code

By default, WordPress allows unfiltered HTML to be used by users in post custom fields, even if their role it set up otherwise. This opens up the possibility of leaving a site vulnerable, if any plugins that uses this data doesn’t check it appropriately.

“Out of the box”, neither the contributor and author roles have unfiltered HTML capabilities but can access custom post fields.

As this plugin requires the use unfiltered HTML, we need to ensure that the only users who use it, should be using it. From version 2.5, any users without this permission that update a post containing embeds from this plugin will cause the code to be filtered.

Reviews & Mentions

“Works like a dream. Fantastic!” – Anita.

“Thank you for this plugin. I tried numerous other iframe plugins and none of them would work for me! This plugin worked like a charm the FIRST time.” – KerryAnn May.

Embedding content – WSD Blogging Server.

Animating images with PhotoPeach – Cómo hago.

DomainExposuresHeadersLast Checked
i*f*p*c*e*.ru F 2026-04-30 03:58:20
a*c*s*c*m*u*i*y*e*l*h*e*t*r*.org D 2026-04-30 03:49:39
m*n*y*l*.com (WP 6.0.11) ⚠️ F 2026-04-30 03:48:26
t*e*a*.com A 2026-04-30 03:42:31
i*v*c*u*d*g*t*l.com (WP 6.9.4) F 2026-04-30 03:38:41
v*s*t*t*e*r*e*t*h.com F 2026-04-30 03:33:46
v*s*t*t*e*r*e.com F 2026-04-30 03:33:46
a*d*o*a*i*.mx F 2026-04-30 03:30:31
v*s*t*k*w*e*a*.com (WP 6.9.4) F 2026-04-30 03:25:19
t*r*v*w*t*a*t*s*.ca F 2026-04-30 03:19:23
t*e*u*b*e*l*.com (WP 6.9.4) F 2026-04-30 03:14:40
b*u*s*o*e*i*t*i*u*i*n.c*m.au F 2026-04-30 03:07:45
v*s*t*j*i*a*l*y.com (WP 6.9.4) F 2026-04-30 03:00:03
c*r*s*l*c*.com (WP 6.0.11) ⚠️ F 2026-04-30 02:52:59
q*i*n*t*o*a*t*u*t.o*g.nz F 2026-04-30 02:51:55
v*s*t*e*s*n*.com (WP 6.9.4) F 2026-04-30 02:51:44
k*n*d*m*r*n*u*s*i*.de F 2026-04-30 02:43:49
p*a*u*c*o*.com F 2026-04-30 02:40:45
6*0*m*m*.org F 2026-04-30 02:39:35
t*e*i*u*l*f*e*d*n*.com (WP 6.9.4) F 2026-04-30 02:33:41
a*a*e*e*l*.org (WP 6.9.4) F 2026-04-30 02:29:57
i*v*s*o*s*l*e*.com (WP 6.8.2) F 2026-04-30 02:16:26
3*0*a*a*e*a*t*o*.org (WP 6.9.4) 🔓 F 2026-04-30 01:45:14
m*n*i*r.com D 2026-04-30 01:42:07
m*r*i*-*c*m*d*-*o*s*a*.de (WP 6.9) F 2026-04-30 01:13:40
m*n*a*m*v*e*i*h*s.com (WP 6.9.4) F 2026-04-30 01:10:38
a*t*z*-*e*e*.de (WP 6.9.4) C 2026-04-30 01:09:30
s*f*w*y*o*r.com F 2026-04-30 01:08:26
f*a*c*l*g*s*i*s*r*u*.com F 2026-04-30 01:07:02
l*a*.l*n*o*n.a*.uk (WP 6.8.5) F 2026-04-30 01:04:45
r*l*t*o*s*i*a*d*n*i*a*y.com (WP 6.9.4) F 2026-04-30 00:22:21
s*o*a*e*b*.org F 2026-04-30 00:15:46
d*s*o*d*m*c*a*y.com F 2026-04-30 00:14:29
t*e*r*v*l*i*g*r*h*v*.org (WP 6.9.4) F 2026-04-30 00:13:31
n*x*e*.com (WP 6.9.4) F 2026-04-30 00:12:23
t*x*s*o*s*n*.org F 2026-04-29 23:50:36
w*b.a*i*i*a.com A 2026-04-29 23:47:38
d*r*m*n*o*e*.com (WP 6.9.4) F 2026-04-29 23:44:09
t*e*i*i*a*m*t.com (WP 6.9.4) F 2026-04-29 23:25:08
f*r*s.nl F 2026-04-29 23:18:33
v*n*o*t*n*a*o*r*.nl F 2026-04-29 23:18:33
b*l*e*r*o*e*o*o*.es F 2026-04-29 23:14:44
s*c*e*v*l*e*.ie F 2026-04-29 23:14:43
s*w*e*s*m*.com (WP 5.1.16) ⚠️ F 2026-04-29 23:07:21
p*a*s*t*m*l*.com (WP 6.9.4) F 2026-04-29 22:52:34
q*a*i*h*.me (WP 6.9.4) F 2026-04-29 22:46:04
c*r*c*n*e*e.com F 2026-04-29 22:44:43
f*a*c*i*e*p*o*p*c*i*g.com (WP 6.9.4) F 2026-04-29 22:36:42
c*r*b*o*s.com (WP 6.0.11) ⚠️ F 2026-04-29 22:31:22
v*l*e*i*d.net F 2026-04-29 22:26:20
s*f*m*n*y*i*a.com (WP 6.9.4) F 2026-04-29 22:24:43
s*f*m*n*y*e*i*e*e*t*e*i*a*s.com (WP 6.9.4) F 2026-04-29 22:24:43
s*f*m*n*y*e*i*e*e*t*a*i*.com (WP 6.9.4) F 2026-04-29 22:24:43
s*f*m*n*y*e*i*e*e*t*o*k*.com (WP 6.9.4) F 2026-04-29 22:24:43
s*f*m*n*y*e*i*e*e*t.com (WP 6.9.4) F 2026-04-29 22:24:43
c*r*a*v*n*u*e*.com (WP 6.0.11) ⚠️ F 2026-04-29 22:22:02
s*f*m*n*y*p*.com (WP 6.9.4) F 2026-04-29 22:21:35
m*n*c*u*l*x.com F 2026-04-29 22:14:05
c*l*f*r*i*c*n*u*.org C 2026-04-29 22:12:01
d*r*s*e*f.com (WP 6.9.4) F 2026-04-29 22:07:59
l*n*g*n*l.com F 2026-04-29 22:03:12
f*a*c*s*o*e*a*o.com (WP 6.9.4) F 2026-04-29 21:55:01
n*w*o*k*e*u*i*i*s*a*y*r*b*o*.com F 2026-04-29 21:41:42
l*n*u*g*s*r*i*e*a*s*c*a*e*g*v.com A 2026-04-29 21:39:15
n*w*.2*c*.org (WP 6.8.5) F 2026-04-29 21:22:47
a*a*v*r.com F 2026-04-29 21:09:51
p*l*a.g*v.pl F 2026-04-29 20:45:56
s*f*-*o*e*r*t*r*m*n*.com (WP 6.9.4) F 2026-04-29 20:14:12
b*l.sg A 2026-04-29 20:14:03
f*m*l*a*u*e*o*a.c*m.es F 2026-04-29 20:13:22
b*r*n*n*.ch (WP 6.9.4) F 2026-04-29 20:09:38
v*p*l*t.aero (WP 6.8) F 2026-04-29 20:09:38
a*a*u*h*.fr F 2026-04-29 20:04:48
a*a*o*t.c*.uk (WP 6.9.4) C 2026-04-29 19:54:57
o*d*n*u*g.r*y*h*s*o*-*e*i*t*n*e.org (WP 6.4.8) ⚠️ F 2026-04-29 19:53:27
s*f*r*i*a.com D 2026-04-29 19:50:49
r*c*h*.com (WP 6.9.4) F 2026-04-29 19:46:53
b*o*.q*i*t.ly (WP 4.9.2) ⚠️ F 2026-04-29 19:27:59
t*e*a*k*i*c*s*.com (WP 6.9.4) D 2026-04-29 19:27:31
c*y*t*c*r*e*c*v*r*o*e*.nl (WP 6.7.5) F 2026-04-29 19:23:37
s*-*n*o.de (WP 6.9.4) F 2026-04-29 19:16:31
d*.t*s*z*o*m*.cz (WP 5.8.13) ⚠️ F 2026-04-29 19:15:47
s*f*r*-*c*d*m*.com (WP 6.9.4) F 2026-04-29 19:05:11
c*m*d*m*s*y.w*e*g*n*.com D 2026-04-29 18:50:37
r*g*s*r*r.g*u.edu F 2026-04-29 18:49:54
b*e*a*e.pl (WP 6.9.4) C 2026-04-29 18:48:30
r*d*o*d*o*s*o*r*a*e*t*t*.i*x*r*k*r.com (WP 6.9.4) F 2026-04-29 18:20:40
h*b*i*a*t*p*r*.com (WP 6.9.4) F 2026-04-29 18:17:55
t*e*a*e*e*i*.com (WP 4.1) ⚠️ 📡 F 2026-04-29 18:14:27
w*n*i*g*o*e*.fr F 2026-04-29 18:08:23
b*l*e*-*o*o*-*a*b*r*.de (WP 6.1.1) ⚠️ F 2026-04-29 17:51:47
a*l*b*a*d*e.ie F 2026-04-29 17:46:38
n*w*w*t*h*v.com F 2026-04-29 17:46:16
f*a*-*r*e.com (WP 6.9.4) F 2026-04-29 17:40:39
p*p*e*s.com (WP 6.9.4) F 2026-04-29 17:36:25
p*e*o*t*.a*e*c*.it D 2026-04-29 17:32:12
r*a*i*g*r*d*o.com (WP 6.9.4) F 2026-04-29 17:18:17
t*e*u*e*m*s*i*p*o*e*t.com F 2026-04-29 17:18:12
s*d*c*n*i*e.com (WP 6.9.4) F 2026-04-29 17:14:29
t*e*u*a*a*m*s*u*.com D 2026-04-29 17:13:39

Top 50 Plugins

Plugin Count
elementor 2,296,020
contact-form-7 2,112,077
elementor-pro 1,301,171
woocommerce 1,070,876
revslider 781,706
js_composer 518,037
jetpack 482,316
wp-rocket 381,369
essential-addons-for-elementor-lite 349,387
header-footer-elementor 291,450
gravityforms 284,103
gutenberg-core 272,914
elementskit-lite 271,276
instagram-feed 268,809
complianz-gdpr 265,852
google-analytics-for-wordpress 265,230
google-site-kit 259,072
cookie-law-info 257,387
sitepress-multilingual-cms 233,298
bluehost-wordpress-plugin 218,977
wpforms-lite 199,893
astra-sites 192,059
litespeed-cache 176,653
gutenberg 160,754
gtranslate 155,830
cookie-notice 151,715
coblocks 146,372
the-events-calendar 136,756
popup-maker 128,842
astra-addon 114,404
bb-plugin 113,855
premium-addons-for-elementor 111,878
LayerSlider 111,644
tablepress 110,511
wp-smushit 110,210
mailchimp-for-wp 109,003
duracelltomi-google-tag-manager 101,084
cleantalk-spam-protect 97,693
creame-whatsapp-me 97,207
woocommerce-gateway-stripe 97,148
akismet 96,811
honeypot 96,681
woocommerce-payments 95,836
megamenu 93,649
pro-elements 92,375
smart-slider-3 92,146
fusion-builder 91,637
custom-fonts 91,230
click-to-chat-for-whatsapp 90,345
pixelyoursite 89,088

Top 50 Themes

Theme Count
hello-elementor 749,021
Divi 619,957
astra 591,577
pub 183,940
generatepress 141,028
Avada 140,230
flatsome 140,135
h4 106,308
oceanwp 102,921
kadence 92,273
enfold 80,783
salient 77,863
bb-theme 71,767
twentytwentyfour 69,986
blocksy 66,299
cocoon-master 65,434
twentytwentyfive 63,491
twentyseventeen 63,269
betheme 62,812
dt-the7 52,398
woodmart 48,531
neve 45,836
twentytwentyone 39,697
bridge 38,979
Avada-Child-Theme 38,038
gox 35,732
swell 34,805
twentytwenty 34,767
lightning 34,356
twentytwentythree 32,116
bricks 28,436
Impreza 28,338
Newspaper 25,729
twentytwentytwo 25,275
epik-redesign 22,537
pro 21,126
storefront 21,025
extendable 20,913
uncode 20,832
twentysixteen 20,585
sydney 19,106
yith-wonder 18,999
themify-ultra 17,749
Total 17,025
twentyfifteen 15,697
porto 15,268
hestia 15,066
yootheme 14,187
twentynineteen 14,182
thrive-theme 14,115