The WordPress.org plugin directory lists 74,740 plugins as of 12 November 2026, according to its public API. The count matters less than how many you run, how current they are and who maintains them. Fewer, well-maintained plugins carry less risk than many unmaintained ones.
How we counted
We queried the directory's public API on 12 November 2026: https://api.wordpress.org/plugins/info/1.2/?action=query_plugins&request[per_page]=1. The response reported 74,740 results. You can run the same request and see a different number, because plugins are added and closed every day.
Older articles quote lower figures. We used "more than 60,000" on this page before we re-checked it. The API count covers plugins listed in the directory. Premium plugins sold on vendors' own sites are not in it.
How many WordPress plugins is too many?
There is no fixed number of WordPress plugins that is too many. Patchstack found 91% of the 11,334 new WordPress vulnerabilities of 2025 in plugins, so each extra plugin adds code you must update. Test each plugin instead of counting them.
Every plugin is code that runs on your server and needs updates. Ten well-maintained plugins can be safer than three abandoned ones. Use these tests instead of a count:
- Does each plugin do a job you need today?
- Was it updated recently, and does the directory page show it tested with your WordPress version?
- Does it have active installs and a maintainer with a visible history?
- Would you notice if it stopped working?
Delete plugins that fail these tests. The WooCommerce developer documentation says to remove plugins and themes that are no longer maintained or have known vulnerabilities.
How many plugins should a WordPress site have?
Aim for the fewest plugins that cover your jobs. Each one is more code to update, and Patchstack found 91% of 2025's new WordPress vulnerabilities in plugins. A store usually needs a payment gateway, shipping rates, and maybe a plugin for email or SEO. Check what your host already does before you add one. EasWrk plans include LiteSpeed caching, so look at that before installing a separate caching plugin.
Are WordPress plugins safe?
Most are safe to use if kept updated, but plugins are where the known flaws are. In the Patchstack State of WordPress Security in 2026 report, 91% of the 11,334 new WordPress vulnerabilities found in 2025 were in plugins. Patchstack also reports a median of 5 hours to mass exploitation for the most heavily exploited vulnerabilities.
That does not mean avoid plugins. It means a patched plugin only protects the sites that applied the patch. Our guide on whether WordPress is secure covers the wider picture. For stores, see WooCommerce payment security.
Two things to check before you install: the date of the last update, and whether the plugin is tested with your WordPress version. Both are on the plugin's directory page.
How EasWrk helps with plugin upkeep
On EasWrk, WrkMate can list your active plugins because it reads your WordPress files and database directly. That gives you the list you need for the tests above. Every plan also includes a firewall and daily backups kept for 30 days, so a bad update can be rolled back.
If you would rather not run updates yourself, our care plans have someone handle updates, with a staging review before changes go live.
Questions people ask
How many WordPress plugins are there?
The WordPress.org plugin directory listed 74,740 plugins on 12 November 2026, according to its public API. Older articles quote figures from 55,000 to 70,000. Premium plugins sold on vendors' own sites are not in the directory, so the total across all sources is higher.
How many free plugins does WordPress offer?
The free directory at wordpress.org/plugins listed 74,740 plugins when we queried its public API on 12 November 2026. Some listed plugins are free versions of paid products, so free does not always mean the full feature set. Check what the free version includes before you build on it.