Expandable Paywall icon

Expandable Paywall

Expandable Paywall is a WordPress plugin with the following stats:

  • #3,319 Global Rank
  • 10+ active installs
  • 5/5 2 ratings
  • Since 2020 6 years active

PF Score (About PF Scores)

PF Score is not a quality guarantee. It is a ranking based on available public signals.

Bronze53.9
Platinum
Gold
Silver
Bronze
Low

Score Breakdown

16.7
Popularity 40% 10+ active installs
63.6
Reputation 35% 5★ from 2 ratings
99.9
Freshness 25% Updated 8 days ago

No active penalty — 1 historical CVE, resolved — details

Download Trends

Loading download data…

Vulnerabilities

1 Total
1 Patched
0 Active
100% Resolved rate
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Freemius SDK for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘fs_request_get’ function in versions up to, and including, 2.5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

6.1 Medium Affected 1.1.1 – 2.0.16 Patched in ✓ 2.0.17 Published 18 Jul 2023 CVE CVE-2023-33999

Vulnerability data provided by Wordfence Intelligence (opens in a new tab). CVE data: Copyright 1999–2026 The MITRE Corporation. CVE Terms of Use (opens in a new tab).

About Expandable Paywall

A paywall solution that can be easily expanded with integration with several third party providers.

The Expandable Paywall plugin offers a robust solution for implementing paywalls on WordPress sites. Its core functionality includes a simple hard paywall using native WordPress authentication. The plugin is uniquely designed to integrate with various circulation fulfillment providers, making it ideal for magazine publishers. Premium add-ons expand its capabilities, supporting multiple paywall types, authentication methods, and advanced reporting features.

Screenshots

Admin Screen (Basic Paywall & Auth)

Admin Screen (Basic Paywall & Auth)

Admin Screen (Basic Paywall)

Admin Screen (Basic Paywall)

Frequently Asked Questions

Do you offer installation and customization services?

Yes, if you need help with installation and/or would like additional customization work done for your website, you can fill out a request form at https://emoxie.com/contact

I wish this plugin had XZY feature

While I try to do my best to incorporate new features all the time, I implemented a new Feature Request board located at https://emoxie.com/contact

Ratings & Reviews

5
2 ratings
5★
2
4★
0
3★
0
2★
0
1★
0

Recent Reviews

Loading reviews…

View all reviews on WordPress.org (opens in a new tab)

Changelog

=2.1.11=
* SECURITY – Registration through the paywall form is now off by default, behind a new setting. Sites using the registration form must enable it after updating. See the upgrade notice.
* SECURITY – Roles that can edit or manage the site are no longer offered or accepted as subscriber roles.
* SECURITY – Registration now validates the email address and requires a password.
* SECURITY – New bypass links use a cryptographically random code. Existing links keep working.
* SECURITY – Reading and clearing the debug log now requires the same permission as the Log screen.
* SECURITY – Category, post type and role names are escaped on the settings screen.
* SECURITY – The forgot password link escapes its URL, and is omitted when none is configured.
* SECURITY – The Log screen no longer opens its own database connection or prints database errors to the browser.
* UPDATE – DataTables is bundled with the plugin instead of loaded from a CDN, and is about 117KB smaller.
* UPDATE – Tested up to WordPress 7.0.2.
* BUGFIX – Fixed a fatal error that took out the front end when the paywall was enabled but its settings had never been saved.
* BUGFIX – Fixed login failing for passwords containing < or >, and for usernames or email addresses containing an apostrophe.
* BUGFIX – Filters registered on init, which is where add-ons register them, are no longer ignored for protected categories and bypass roles.
* BUGFIX – Bypass links are now generated for posts saved in the block editor.
* BUGFIX – A second login or register shortcode on the same page now renders.
* BUGFIX – Logged user agents no longer store escaped slashes, and a missing User-Agent no longer raises a notice.

=2.1.10=
* UPDATE – Login Form redirects with cache busting parameter.

=2.1.9=
* UPDATE – Login Form shortcode now redirects back to page you were on when logging in

=2.1.8=
* BUGFIX – Removed Debugging Code

2.1.7

  • BUGFIX – Fixed load_plugin_textdomain PHP Notice

2.1.6

  • UPDATE – Updated all third-party vendor packages
  • UPDATE – Added new filter for controlling when to show show_authentication_role_paid

2.1.5

  • UPDATE – Updated all third-party vendor packages

2.1.4

  • UPDATE – Excluded the search screen from paywall trigger

2.1.3

  • UPDATE – Add stub function back into public class for extendability

2.1.2

  • BUGFIX – Fixed issue with 500 error when trying to create a new user on specific installs

2.1.1

  • HOTFIX – Corrected logic for displaying paywall
  • UPDATE – Added in new helper functions

2.1.0

  • UPDATE – Updated all third party libraries to latest versions
  • UPDATE – Refactored all code to PHP 8.1 standards
  • UPDATE – Added many more functions to core Helper class
  • BUGFIX – Fixed PHP warning on login.php template

=2.0.23 =
* BUGFIX – Fixed issue with protecting categories and sub categories on some installs.

=2.0.22 =
* UPDATE – Added in new helper function to check if we should show paid authentication user role.
* UPDATE – Added function to clear logs

=2.0.21 =
* UPDATE – Paywall Category now allows for any sub category under the main protected category to automatically be protected.
* UPDATE – Added option to disable paywall.

=2.0.20 =
* FEATURE – Added whole new logging section

=2.0.19 =
* UPDATE – Updated addon on handling and vendor paths.

2.0.18

  • UPDATE – Updated all third-party vendor libraries
  • BUG FIX – Fixed issue where protected content could not be seen by some users.

2.0.17

  • UPDATE – Updated all third-party vendor libraries

2.0.16

  • Feature – Added in meta box to posts that will generate a unique bypass link for articles to not show paywall.

2.0.15

  • Feature – Added in new filter for allowing to programmatically bypass paywall

2.0.14

  • UPDATE – Updated logic for when locks appear on articles
  • Feature – Upon logging in the user will now be redirected back to where they were with ?cache_busting=RANDOM

2.0.13

  • BUG FIX – Fixed item with archives not being excluded from protection level.

2.0.12

  • UPDATE – Updated to the latest version of Freemius.
  • BUG FIX – Fixed bug where roles were not being read in certain instances.
  • BUG FIX – Fixed bug where Locks were not showing when enabled.
  • UPDATE – Added more error reporting options to error_log

2.0.11

  • UPDATE – When debug is turned on it will send email to site admin.

2.0.10

  • UPDATE – Updated vendor libraries

2.0.9

  • UPDATE – Added in new shortcode to protect pieces of content on any page/post. [expandable-paywall-protect] Protected Content [/expandable-paywall-protect]

2.0.8

  • UPDATE – Updated all vendor libraries
  • UPDATE – Code Cleanup and Refactoring

2.0.7

  • UPDATE – Added in debug mode
  • UPDATE – Added in new filter to allow set basic role

2.0.6

  • BUG FIX – updated authentication to account for case-sensitivity in
  • UPDATE – removed erroneous error_logging. 🙂

2.0.5

  • BUG FIX – corrected issue with the Lock icon showing up on non-protected pages.

2.0.4

  • FEATURE – Added ability to display a lock icon next to protected posts
  • FEATURE – Added ability to fade out excerpt into paywall.
  • FEATURE – Added ability to output Schema Structured Data.
  • UPDATE – Updated to latest version of Freemius SDK
  • UPDATE – Added a logging function to helper files.
  • UPDATE – Added in more support for multisite installs
  • UPDATE – Added in default styles to fade out the excerpt text

2.0.3

  • FEATURE – Added in logout shortcode
  • UPDATE – Updated Paywall CSS Styles

2.0.1

  • BUG FIX – Corrected improper function calls when initially installing.

2.0.0

  • Reworked a ton of filters and hooks. Updated all latest 3rd party SDKs

1.1.2

  • BUG FIX – Corrected issue which registration would throw a 500 error behind the scenes.

1.1.1

  • BUG FIX – Corrected issues with data sanitization.

1.1.0

  • Initial Version

Alternatives to Expandable Paywall

Other WordPress plugins serving a similar purpose, ranked by relevance and PF Score.

Silver69.6
Leaky Paywall icon

Leaky Paywall

The subscription engine for news & niche publishers.

★ 4.2/5·600+ installs·Updated 29 Jul 2026
Bronze45.9
Contentlockr icon

Contentlockr

Unlock more subscribers and traffic.

★ 5/5·Updated 2 Jul 2026
Gold70.6
Memberful – Membership Plugin icon

Memberful – Membership Plugin

Sell memberships and restrict access to content with WordPress and Memberful.

★ 4.7/5·1K+ installs·Updated 7 Aug 2026
Silver65.6
codoc icon

codoc

A WordPress plugin for monetizing your website with paid articles, Reader Plans, and tipping.

2K+ installs·Updated 15 May 2026
Silver63.2
Zlick Paywall icon

Zlick Paywall

Sell subscriptions and one-off access to your content with industry-leading conversion rates, a simple platform to operate, and no upfront…

★ 5/5·100+ installs·Updated 16 Jul 2026
Silver56.8
Buy Me a Coffee – Membership, Paywall & Fundraiser with Stripe & PayPal icon

Buy Me a Coffee

WordPress membership, paywall, donation, and subscription plugin for creators. Monetize content with Stripe and PayPal.

★ 4/5·80+ installs·Updated 22 May 2026
Bronze53.9
ITERAS icon

ITERAS

Integration with ITERAS, a cloud-based state-of-the-art system for managing subscriptions and payments for magazines.

★ 3/5·30+ installs·Updated 20 May 2026
Bronze52.3
Pigeon Paywall icon

Pigeon Paywall

The official Pigeon Paywall plugin for WordPress

90+ installs·Updated 17 Dec 2025
Bronze47.3
Exodox icon

Exodox

With Exodox you can earn money from your web content, by locking access to selected posts and pages, which readers…

80+ installs·Updated 10 Jun 2025
Bronze47.3
WP VK-付费内容插件(付费阅读/资料/工具软件资源管理) icon

WP VK-付费内容插件(付费阅读/资料/工具软件资源管理)

WP VK,中文名称为付费内容插件。近几年付费内容在全球风靡起来,一些公众号及站长开始以付费模式经营有价值的文章、资料文档及工具软件资源等。但站长要在网站博客实现付费内容,需要实现支付接口的对接、付费内容部分加密及订单管理等,而WordPress默认功能又无法提供支持。 为此闪电博,开发了一款专属于 …

★ 3.7/5·80+ installs·Updated 9 Jun 2025