WP-CORS
Allows AJAX requests from other sites to integrate content from your site using the CORS standard.
The facts
- Rating
- 2.3★ from 3
- Active installs
- 1k+
- Price
- Free
- Last updated
- 28 Jul 2023
- Added
- Oct 2014
- Requires WP
- 3.6
- Tested up to
- WP 6.2.11
- Downloads
- 40,734
Our analysis
AI-assistedWP-CORS is a WordPress plugin designed to facilitate AJAX requests from a different domain by managing Cross-Origin Resource Sharing (CORS) settings. It allows content authors to create help pages in WordPress, which can then be embedded in a single page application hosted externally. The plugin evaluates the Origin header of incoming requests to determine if they should be permitted based on specified allowed domains.
This plugin is suitable for developers or content authors who need to integrate WordPress content into applications hosted on different domains while ensuring security through controlled access.
Best for: Developers or content authors integrating WordPress content into external applications.
What it does well
- ✓Allows AJAX requests from specified domains
- ✓Enables embedding WordPress content in external applications
- ✓User-defined settings for allowed domains
Where it falls short
- •Low rating of 2.3 out of 5
- •Limited active installs at 1,000
- •Directory score of 48/100 indicates potential issues
Verdict
WP-CORS provides a specific solution for managing CORS in WordPress, but its low rating and limited installs suggest potential concerns that users should consider.
From the developer
tstephenson's own description of WP-CORS, lightly tidied.
My use case is to allow content authors to write help pages in WordPress.
This content is fetched and embedded into a single page application hosted on another domain.
AJAX requests to this site from another are typically disallowed by the browser’s security model.
To permit legitimate uses the requesting browser may include an Origin header containing its domain.
This plugin uses the Origin header to decide whether to allow the request or not.
Allowed domains can be specified in the plugin’s Settings page.