Ohio Extra
meteorgpl-plugin/ohio-extra
Supercharge your WordPress site with WPBakery Page Builder shortcodes, Elementor widgets and ACF PRO extended theme settings and additional widgets.
plugin
3.8.1
Get started in two commands
Register the repository, store a token from your account, then require any plugin or theme.
1Add the repository
composer config repositories.meteorgpl composer https://composer.meteorgpl.comcomposer config --global http-basic.composer.meteorgpl.com token <your-token>2Install a plugin or theme
composer require meteorgpl-plugin/ohio-extra
composer require meteorgpl-theme/edubinPackages are named meteorgpl-plugin/<slug> and meteorgpl-theme/<slug>, where the slug is the plugin’s or theme’s own folder name.
Recently updated
Edubin
meteorgpl-theme/edubin
Parent theme · 1 child theme
Edubin is a Education LMS WordPress Theme.
theme
9.6.7
GPL-2.0-or-later
Divi Supreme Pro
meteorgpl-plugin/supreme-modules-pro-for-divi
Divi Supreme Pro enhances the experience and features found on Divi 4 and Divi 5. Packed with everything you need to build amazing websites with ease.
plugin
5.0.96.1
GPL-2.0-only
Edubin Core
meteorgpl-plugin/edubin-core
A Required core plugin for Edubin Theme.
plugin
9.6.7
Minimog
meteorgpl-theme/minimog
Parent theme · 1 child theme
Minimog – The High Converting eCommerce WordPress Theme
theme
4.5.7
GPL-2.0-or-later
Subscribe To Download
meteorgpl-plugin/subscribe-to-download
A plugin to collect email using an email subscribing form by providing the free downloadable items
plugin
2.1.1
Why a Composer repository
Verified, not nulled
Every version is scanned for malware and nulling code before it is published. License checks, activation and updates stay exactly as the vendor ships them.
Every version, pinned
Tags per vendor release, a reproducible composer.lock, rollbacks to any published version.
Built for workflows
Bedrock-style projects, CI with auth.json or COMPOSER_AUTH, the same command for every plugin and theme.
Clear licensing
GPL code only, artwork stripped, a published takedown policy. Support and updates come with the license you buy from the vendor.
Vulnerability alerts for what you run
More than a Composer repository: every public vulnerability report for WordPress plugins and themes is matched against the catalogue and against the versions you run. When one affects you, you are told, with the version that fixes it.
Watch
43,262 vulnerability records are checked several times a day; 6,323 affect packages in the catalogue.
Alert
Watchers of the package and accounts known to run an affected version, from their composer.lock or their downloads, are alerted once: in the inbox, by e-mail or push, and by webhook.
Fix
The alert names the version that fixes the vulnerability and the composer require line. When no fix exists yet, it says so and follows up as soon as one reaches the repository.
Latest advisories affecting the catalogue
High
BuddyBoss App
BuddyBoss App <= 3.2.1 - Authenticated (Subscriber+) Arbitrary File Upload via Feedback Endpoint
No fixed version here yet
Medium
Web 2.0 Directory plugin
Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter
No fixed version here yet
Vulnerability data: Wordfence Intelligence. Each advisory links to its record there.
Copyright 2012-2026 Defiant Inc.. Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/
Copyright 1999-2026 The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. https://www.cve.org/Legal/TermsOfUse
What this is not
This is not a “nulled plugins” site. Nothing in a package is modified to bypass the vendor’s licensing: license checks, activation and update code are kept exactly as the vendor ships them. The repository redistributes the code under the GPL the vendor declared, strips artwork and other assets that are not necessarily GPL, scans every version for malware before publication and keeps a takedown policy. Vendor support and update entitlement stay with the license you buy from the vendor.