Title: WP-PluginsUsed
Author: Lester Chan
Published: 14 สิงหาคม 2007
Last modified: 9 สิงหาคม 2026
---
Search plugins
# WP-PluginsUsed
By [Lester Chan](https://profiles.wordpress.org/gamerz/)
[Download](https://downloads.wordpress.org/plugin/wp-pluginsused.2.0.0.zip)
* [Details](https://th.wordpress.org/plugins/wp-pluginsused/#description)
* [Reviews](https://th.wordpress.org/plugins/wp-pluginsused/#reviews)
* [Installation](https://th.wordpress.org/plugins/wp-pluginsused/#installation)
* [Development](https://th.wordpress.org/plugins/wp-pluginsused/#developers)
[Support](https://wordpress.org/support/plugin/wp-pluginsused/)
## Description
WP-PluginsUsed lists the plugins your site has installed, split into active and
inactive, on any post or page you like. It reads what is really in wp-content/plugins
every time the page is built, so the list never goes stale.
### Features
* Three shortcodes: a summary line, the active plugins and the inactive ones.
* Each entry links to the plugin’s own page and to its author, with the description
underneath.
* Version numbers can be shown or left off.
* Any plugin you would rather not advertise can be left out of both the listings
and the counts.
* A template tag for themes that would rather call it directly.
### Donations
I spent most of my free time creating, updating, maintaining and supporting these
plugins, if you really love my plugins and could spare me a couple of bucks, I will
really appreciate it. If not feel free to use it without any obligations.
### Usage
### Creating a Plugins Used page
1. Go to `WP-Admin -> Pages -> Add New`
2. Type any title you like in the page’s title area
3. Copy and paste the following into the page’s content area:
```
[stats_pluginsused]
Active Plugins
[active_pluginsused]
Inactive Plugins
[inactive_pluginsused]
```
1. Click ‘Publish’
### Showing The Listings In A Block
Three blocks are available in the editor, under **Widgets**:
* **Plugins Used Summary** — the sentence counting what is installed, active and
inactive, the same one `[stats_pluginsused]` produces.
* **Active Plugins Used** — the plugins your site has switched on.
* **Inactive Plugins Used** — the ones installed but switched off.
None of them has any settings, because none of the shortcodes has any either: which
plugins appear is decided on the settings screen below, so the answer is the same
on every page and there is nothing to configure per post.
All three render on the server, so the block preview in the editor is the real listing
rather than an approximation, and installing, activating or hiding a plugin updates
every page showing one without re-saving anything.
**The shortcodes still work and are not going anywhere.** `[stats_pluginsused]`,`[
active_pluginsused]` and `[inactive_pluginsused]` behave exactly as they always
have, and a page already containing one needs no change. The blocks call the same
code the shortcodes call, so the two render identically — use whichever suits the
page.
### Settings
Go to `WP-Admin -> Settings -> WP-PluginsUsed` to choose whether version numbers
are shown and to tick any plugins you would rather not list. Hidden plugins are
left out of the counts as well as the listings.
### Template Tags
```
display_pluginsused( $type, $display ) renders one of the listings from a theme
```
template. `$type` is `stats`, `active` or `inactive`; pass `true` as `$display`
to echo instead of return.
### Filters
* `wp_pluginsused_show_version` — whether version numbers are appended to plugin
names.
* `wp_pluginsused_hidden_plugins` — array of plugin names to hide, matched against
the plugin’s `Plugin Name` header.
* `wp_pluginsused_plugins_used` — the collected listing, keyed by `active` and `
inactive`, before it is rendered.
* `wp_pluginsused_capability` — the capability required to reach the settings screen.
The first three were renamed in 2.0.0 and the old, unprefixed names do nothing.
See `Upgrade Notice`.
## Screenshots
[⌊Settings -> WP-PluginsUsed, which chooses whether versions are shown and which
plugins are left out⌉⌊Settings -> WP-PluginsUsed, which chooses whether versions
are shown and which plugins are left out⌉[
Settings -> WP-PluginsUsed, which chooses whether versions are shown and which plugins
are left out
[⌊The list of active plugins, on a page holding the shortcode⌉⌊The list of active
plugins, on a page holding the shortcode⌉[
The list of active plugins, on a page holding the shortcode
## Blocks
This plugin provides 3 blocks.
* Plugins Used Summary One sentence counting the plugins installed, active and
inactive.
* Inactive Plugins Used The plugins this site has installed but switched off.
* Active Plugins Used The plugins this site has switched on, with their authors
and descriptions.
## Installation
1. Install and activate the plugin.
2. Go to `WP-Admin -> Settings -> WP-PluginsUsed` to choose whether version numbers
are shown and which plugins to leave out of the list.
3. Put the listings on a page, with the shortcodes or with the blocks. Usage below
has both.
## FAQ
### How do I hide plugin version numbers?
Go to `WP-Admin -> Settings -> WP-PluginsUsed` and untick **Show each plugin’s
version number next to its name
.
The `PLUGINSUSED_SHOW_VERSION` constant some sites moved into `wp-config.php` is
no longer read. The checkbox replaces it.
### How do I hide plugins?
Go to `WP-Admin -> Settings -> WP-PluginsUsed` and tick the plugins you want left
out. To do it in code instead:
```
add_filter( 'wp_pluginsused_hidden_plugins', function ( $hidden ) {
$hidden[] = 'Plugin Name 1';
$hidden[] = 'Plugin Name 2';
return $hidden;
} );
```
Names added by the filter are merged with whatever is ticked on the settings
screen.
The `$pluginsused_hidden_plugins` global that did this before 2.0.0 is no longer
read.
### Where did the settings from my edited plugin file go?
Before 2.0.0 the only way to configure this plugin was to edit
wp-pluginsused.php,
so those edits were lost every time the plugin updated. They now live in the database
and survive updates. Re-apply them once on the settings screen.
## Reviews
There are no reviews for this plugin.
## Contributors & Developers
“WP-PluginsUsed” is open source software. The following people have contributed
to this plugin.
Contributors
* [ Lester Chan ](https://profiles.wordpress.org/gamerz/)
“WP-PluginsUsed” has been translated into 2 locales. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/wp-pluginsused/contributors)
for their contributions.
[Translate “WP-PluginsUsed” into your language.](https://translate.wordpress.org/projects/wp-plugins/wp-pluginsused)
### Interested in development?
[Browse the code](https://plugins.trac.wordpress.org/browser/wp-pluginsused/), check
out the [SVN repository](https://plugins.svn.wordpress.org/wp-pluginsused/), or
subscribe to the [development log](https://plugins.trac.wordpress.org/log/wp-pluginsused/)
by [RSS](https://plugins.trac.wordpress.org/log/wp-pluginsused/?limit=100&mode=stop_on_copy&format=rss).
## Changelog
### 2.0.0
* FIXED: Merely having the plugin active published the site’s whole plugin inventory—
inactive plugins and exact version numbers included — to anyone who could open
the block editor, whether or not a listing had ever been placed on the site.
Registering a dynamic block is what creates `/wp/v2/block-renderer/`, and
WordPress gates that route on `edit_posts`, i.e. a Contributor; core keeps the
same inventory behind a much higher capability of its own. Previewing a listing
block now takes `manage_options`, filterable through `wp_pluginsused_preview_capability`.
Nothing changes for a listing published on a page
* FIXED: A plugin whose name contains a double space, a tab or a percent-octet
could be ticked as hidden, saved with a success notice, and go on being listed
in full — and its checkbox came back unticked, so it read as a save that had
not worked. The stored list is written through a sanitiser and was being compared
against the raw plugin header; both sides go through the same normaliser now
* FIXED: On multisite, one request that rendered a listing for more than one site
applied the first site’s plugin list, hidden-plugins setting and version setting
to the second — so a plugin hidden on one site could be published on another.
The per-request cache is discarded on `switch_blog`
* CHANGED: The three shortcodes read every installed plugin’s header off disk,
and WordPress caches that in a group it registers as non-persistent — so a page
carrying one of them scanned the whole plugins directory on every request that
got past the page cache, however good the site’s object cache. The headers are
kept for an hour now, discarded whenever a plugin is installed, updated, deleted,
activated or deactivated, and re-read the moment the directory’s contents change—
so a plugin uploaded over FTP still appears immediately. Hidden plugins and the
version switch are applied after the cache rather than baked into it, so a settings
save still takes effect on the next page load
* BREAKING: Requires WordPress 6.8 and PHP 8.2, up from 6.0 and 7.4.
* BREAKING: Renamed all three filters: `pluginsused_show_version`, `pluginsused_hidden_plugins`
and `pluginsused_plugins_used` are now `wp_pluginsused_show_version`, `wp_pluginsused_hidden_plugins`
and `wp_pluginsused_plugins_used`. The old names were dropped outright rather
than deprecated, so code still using them stops being called.
* BREAKING: Dropped the `PLUGINSUSED_SHOW_VERSION` constant and the `$pluginsused_hidden_plugins`
global, the pre-2.0.0 ways of configuring the plugin by editing its own file.
Use the settings screen.
* NEW: Added a settings screen at `Settings -> WP-PluginsUsed`. Version numbers
and hidden plugins were previously configurable only by editing `wp-pluginsused.
php`, which every plugin update silently reverted.
* NEW: Settings are stored in a single `wp_pluginsused_options` row and the upgrade
markers in `wp_pluginsused_version`, and `uninstall.php` removes both on a single
site and across a network.
* NEW: Added the `wp_pluginsused_capability` filter, so the settings screen can
be handed to a role other than administrator.
* NEW: Replaced the `plugin_active.gif` / `plugin_inactive.gif` markers with inline
SVG. They stay sharp on high-density displays, follow the theme’s text colour,
and add no HTTP requests.
* NEW: Added three blocks — Plugins Used Summary, Active Plugins Used and Inactive
Plugins Used — one for each shortcode. They render on the server through the
same code the shortcodes use, so the two produce identical markup and hidden
plugins stay hidden either way. The three shortcodes are unchanged and still
supported: nothing is deprecated, no page needs editing, and a page can carry
a block and a shortcode at once.
* NEW: Added a PHPUnit test suite and GitHub Actions CI.
* CHANGED: Plugin scanning now uses core’s `get_plugins()` instead of a hand-rolled
directory walk and header regexes. Ordering is unchanged.
* CHANGED: Restructured into `includes/` as `WP_PluginsUsed_*` classes, with the
old procedural functions kept as working deprecated shims.
* CHANGED: Removed `load_plugin_textdomain()`; WordPress has loaded plugin translations
automatically since 4.6.
* FIXED: Fixed a stored cross-site scripting hole in the plugin listings. Values
taken from plugin headers were written straight into `href`, `src`, `alt` and`
title` attributes with only `strip_tags()` applied, which removes tags but leaves
quotes — so a plugin whose header contained a double quote could inject a live
event handler, and a `Plugin URI` of `javascript:...` was emitted verbatim. Every
value is now escaped at its sink.
* FIXED: Network-activated plugins were listed as inactive on multisite, because
only `active_plugins` was consulted.
* FIXED: A plugin with no `Plugin URI` or `Author URI` no longer renders an empty`
`.
* FIXED: `uninstall.php` no longer stops at the hundredth site on multisite, and
restores each site inside the loop.
* NOTE: The three phrases making up the summary sentence were reworded so their
bold markup is no longer part of the translated text. Existing translations of
those three fall back to English until they are retranslated.
* NOTE: The summary sentence joined its three counts with a bare translated “and”,
leaving the word order and the full stop in the source. The join is one string
with numbered placeholders now. That msgid changed, so an existing translation
of it falls back to English until it is retranslated
## Meta
* Version **2.0.0**
* Last updated **2 สัปดาห์ ago**
* Active installations **70+**
* WordPress version ** 6.8 or higher **
* Tested up to **7.0.4**
* PHP version ** 8.2 or higher **
* Languages
* [Chinese (Taiwan)](https://tw.wordpress.org/plugins/wp-pluginsused/), [Czech](https://cs.wordpress.org/plugins/wp-pluginsused/)
และ [English (US)](https://wordpress.org/plugins/wp-pluginsused/).
* [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/wp-pluginsused)
* Tag
* [plugins](https://th.wordpress.org/plugins/tags/plugins/)
* [Advanced View](https://th.wordpress.org/plugins/wp-pluginsused/advanced/)
## Ratings
4.8 out of 5 stars.
* [ 3 5-star reviews ](https://wordpress.org/support/plugin/wp-pluginsused/reviews/?filter=5)
* [ 1 4-star review ](https://wordpress.org/support/plugin/wp-pluginsused/reviews/?filter=4)
* [ 0 3-star reviews ](https://wordpress.org/support/plugin/wp-pluginsused/reviews/?filter=3)
* [ 0 2-star reviews ](https://wordpress.org/support/plugin/wp-pluginsused/reviews/?filter=2)
* [ 0 1-star reviews ](https://wordpress.org/support/plugin/wp-pluginsused/reviews/?filter=1)
[Your review](https://wordpress.org/support/plugin/wp-pluginsused/reviews/#new-post)
[See all reviews](https://wordpress.org/support/plugin/wp-pluginsused/reviews/)
## Contributors
* [ Lester Chan ](https://profiles.wordpress.org/gamerz/)
## Support
Got something to say? Need help?
[View support forum](https://wordpress.org/support/plugin/wp-pluginsused/)
## Donate
Would you like to support the advancement of this plugin?
[ Donate to this plugin ](https://lesterchan.net/site/donation/)