PLUGIN SECURITY

Is Classic Editor Addon safe?

The "Classic Editor +" plugin disables the block editor, removes enqueued scripts/styles and brings back classic Widgets.

What this plugin does

  • Slug: classic-editor-addon
  • Author: Pieter Bos
  • 40000+ active installs
  • 98/100 rating (31 reviews on wordpress.org)
  • 677823 all-time downloads
  • On WordPress.org since 2018-07-08

classic editorclassic widgetsremove frontend scriptsremove frontend stylingremove patterns

Maintenance status

  • Latest known version: 4.4.1
  • Last updated: 2026-08-16 5:31am GMT
  • Tested up to WordPress: 7.1
  • Requires PHP: 5.6+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

0 known CVEs on file for Classic Editor Addon. Reported between 2022 and 2022.

CVE Vulnerability Type Severity Affected Fixed in Published Status
Classic Editor + [classic-editor-addon] < 2.6.4 Unknown < 2.6.4 2.6.4 2022-01-24 ✓ fixed in latest
Classic Editor + [classic-editor-addon] < 2.6.4 Unknown < 2.6.4 2.6.4 2022-01-24 ✓ fixed in latest
Classic Editor + [classic-editor-addon] < 2.6.4 Unknown < 2.6.4 2.6.4 2022-01-24 ✓ fixed in latest
Classic Editor + [classic-editor-addon] < 2.6.4 Unknown < 2.6.4 2.6.4 ✓ fixed in latest
Classic Editor + [classic-editor-addon] < 2.6.4 Unknown < 2.6.4 2.6.4 ✓ fixed in latest
WP Dependency Installer < 4.3.1 - Subscriber+ Arbitrary Plugin Activation Unknown < 2.6.4 2.6.4 ✓ fixed in latest
WP Dependency Installer < 4.3.1 - Arbitrary Plugin Installation from Dependency via CSRF Unknown < 2.6.4 2.6.4 ✓ fixed in latest

How to fix it

Keep Classic Editor Addon updated — 4.4.1 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.