Someone has to decide.
Plain verdicts on WordPress plugins and themes. What each one is genuinely good for, who should walk away from it, and the questions everyone ends up asking at 2am.
Crete: attractive portfolio theme, but not worth the security risk
Crete is not worth buying for a new WordPress site because its bundled Crete Core plugin has a serious unauthenticated SQL-injection vulnerability affecting versions through 1.4.3, with no clearly documented public patch. Its Elementor portfolio layouts and one-click demos are useful, but safer alternatives such as Astra, Kadence, GeneratePress, or Hello Elementor offer a better long-term foundation.
Not recommended
Recent rulings
All verdicts →By category
How we rule
You should not have to read nine hundred words to find out whether something is worth your time. Every page opens with the decision.
Every ruling names the people it does not suit. A site that recommends everything recommends nothing.
The drawbacks we list are the ones showing up in support forums and reviews, not ones we imagined. We say where they came from.