PHP Everywhere


Attention: The update to version 3.0.0 of this plugin is a breaking change that removes the [php_everywhere] shortcode and widget. Run the upgrade wizard from the plugin’s settings page to migrate your old code to Gutenberg blocks.

This plugin enables PHP code everywhere in your WordPress instalation.

Using this plugin you can use PHP in:

  • Pages
  • Posts
  • Sidebar
  • Everywhere you can place a Gutenberg block

The plugin also supports different user restrictions and multiple PHP instances.

So feel free to just insert PHP in every part of your WordPress site.

Examples of use:

  • Create custom contact forms and process any kind of data or upload.
  • Generate user optimized content.
  • Customize every little detail of your WordPress installation.


Icon & Wallpaper Design : GiGATEAM Ltd.


English and German : Alexander Fuchs
Portuguese : Luis Reis
Serbian : Borisa Djuraskovic
Italian : Andrea Rosenthal Manetti


  • This is the plugin's Gutenberg block.


This plugin provides 1 block.

  • PHP Everywhere


Extract the zip file and just drop the contents in the wp-content/plugins/ directory of your WordPress installation and then activate the plugin from plugins page. There is a usage guide on the plugins options page.


Q: How do I use this plugin?

A: You can find a usage guide on the options page

Q: Does this plugin support multiple PHP instances?

A: Yes, the Gutenberg block also supports multiple instances.

Q: Does this plugin support the Gutenberg editor?

A: Yes. The plugin provides a Gutenberg block.

Q: The plugin is broken / doesn’t work / is incompatible.

A: This plugin requires your hoster to allow the use of the eval() function. Please make sure your website can use it. A first step to finding the issue in your code or any incompatibility is to enable debugging in WordPress. Feel free to create a new support thread after doing so and send me the errors you see in your debug log.


جنوري 13, 2022
The 3.0.0 upgrade remove [php_everywhere] shortcode and all codes you wrote will disappear, without any warnings!! So all your php codes will stop working. There is a upgrade wizard that's not work properly. It just shows some part of your php codes in some pages that you used php in them. Not all pages and neither whole codes will retrievable. I had no choice but downgrade to old version.
جنوري 12, 2022
This upgrade to 3.0 lobotomizes the plugin, and the messaging utterly failed to make clear how drastic the change it makes to your site. I'm trying to make a bunch of key pages work again, and would love a few well chosen words w/ Mr. Fuchs, who is wasting my time by the bucketfull. Really displeased. Too bad I can't tell his private sector employers what a mess he's made and how much money he's costing my customer. Really very unhappy. Do I have to uninstall 3.0 to get re-install the older version? Any tips? I need my code blocks back.
جنوري 12, 2022
Plugin ceased to be useful from the moment the developer decided to disable support for the widget and classic editor of Wordpress. In addition to disabling, it released the update, caused problems on several sites and didn't even bother about it (clearly).
جنوري 12, 2022
“PHP Everywhere” used to be true to its name. It used to come with a PHP widget, it used to offer a PHP short code, along with a PHP option box. But in version 3.0 released today, this rainbow of colourful options have been deleted. We are left with just one option: a PHP Gutenberg block. And if you don’t like or can’t use Gutenberg, “Too bad for you, rainbows are useless anyway,” says now the plug-in.
جنوري 11, 2022
After latest update, plugin is not working anymonre. On every page now seeing the tag [php_everywhere].
جون 16, 2021
Just removed this plugin because someone used it as an redirect malware for weird sites.
Read all 38 reviews

Contributors & Developers

“PHP Everywhere” is open source software. The following people have contributed to this plugin.


“PHP Everywhere” has been translated into 1 locale. Thank you to the translators for their contributions.

Translate “PHP Everywhere” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.


3.0.0 – January 12, 2022

  • New: Added upgrade wizard
  • Improvement: Improved plugin settings
  • Improvement: Improved plugin permission management. Previous permissions have been reset to admin only to allow users to set fine-grained permissions.
  • Improvement: Improved Gutenberg block
  • Fix: Fixed multiple critical vulnerabilities. Thanks to Ramuel Gall/Wordfence for pointing them out.
    • Issue: Remote Code Execution by low-privileged users via shortcode; Estimated CVSS score: 9.9(Critical)
    • Issue: Remote Code Execution by low-privileged users via metabox; Estimated CVSS score: 9.9(Critical)
    • Issue: Remote Code Execution by low-privileged users via gutenberg block; Estimated CVSS score: 9.9(Critical)
  • Removed: Removed shortcode because of vulnerability
  • Removed: Removed options box because of vulnerability
  • Removed: Removed PHP everywhere widget because of vulnerability

2.0.3 – December 23, 2021

  • Fix: Fixed CSRF vulnerability in the plugin. Thanks for Rasif Afeef for pointing it out.

2.0.2 – August 03, 2020

  • Info: Clarified WordPress 5.5 compatibility and adjusted settings page
  • Info: Raised minimum PHP version to 5.6, but 7.3 iis recommended
  • Fix: Fixed fatal errors introduced by upgrading to or installing on WordPress 5.4 and up

2.0.1 – December 04, 2019

  • Info: Clarified WordPress 5.3 compatibility and adjusted settings page

2.0.0 – June 15, 2019

  • New: Added Gutenberg Block
  • New: Added option to disable Options box.
  • New: Added option to disable Gutenberg Block.

1.4.5 – March 14, 2019

  • Info: Clarified Gutenberg and WordPress 5.1 compatibility

1.4.3/4 – October 17, 2018

  • Fix: Fixed deprecated warning on PHP 7.2
  • Fix: Fixed error introduced in 1.4.3

1.4.2 – May 13, 2018

  • New: Added italien translation

1.4.1 – December 01, 2017

  • Fix: Added translation support

1.4 – November 26, 2017

  • New: Added translation support
  • Fix: Fixed security flaw where authenticated users were able to make themself administrators and execute php. Thanks @dandr3ss

1.3 – November 08, 2017

  • Fix: Fixed deprecation notice on PHP 7.1


  • minor bugfix for translations
  • lowered the plugins memmory footprint


  • added a portuguese translation


  • bug fix for WP 4.3.1, thanks thea2zbrand


  • added a german translation
  • added a serbian translation


  • fixed some minor bugs when creating a menu


  • added multiple PHP instances


  • release