Unfiltered MU gives Administrators and Editors the unfiltered_html capability. This prevents WordPress MU/WordPress 3.0 multisite from stripping <iframe>, <embed>, etc. from these users’ posts. Authors and Contributors do not get this capability for security reasons.

The plugin can either be used globally for your entire MU site, or it can be applied on a blog-by-blog basis.

For WordPress MU or WordPress 3.0 multisite only. Regular WordPress already offers this feature and does not need this plugin.

Warning! This is a very dangerous plugin to activate if you have untrusted users on your site. Any user could add Javascript code to steal the login cookies of any visitor who runs a blog on the same site. The rogue user can then inpersonate any of those users and wreak havoc. If all you want is to display videos on your WordPress MU blogs, use the native Embed Support, Viper’s Video Quicktags or any of the other video plugins on WordPress.org.
If you use this plugin your site will be hacked in one way or another if you allow anonymous users on the Internet to create blogs on your site. It’s very dangerous.

Are you still 100% sure you want to use this plugin?

Apparently it still works

By Lucas Carvalho (lucascarvalhopl) on June 12, 2022

I'm using Wordpress version 6.0 and this plugin initially solved my problem, at least adding it as a mu-plugin. It is well written and if necessary it is not difficult to create its own version to allow more user roles if necessary but this functionality should be implemented somehow in the WordPress core in the network and/or site settings.

Still working with WP version 5.8

By abhishaahuja on September 1, 2021

My multisite network uses raw HTML, inline SVG and scripts in certain pages, but Admins trying to edit these pages, would mean the page breaks and displayed in mess...Applying this plugin took the pain out of Super Admins and Admins! Please keep this plugin alive and updated...we need it. Thanks

Needed More Then Ever for Multisite WP 5.0 and later

By greenling on April 3, 2020

I'm no php expert, but wish someone who is would make sure this plugin keeps working with later revisions. WordPress 5.0 seemed to have removed the ability to allow unfiltered HTML with a define line in the config.php file. Hence my subdomain sites all had to have a superadmin place their paypal button scripts. Site admins could not go back and edit those pages without the script being erased. This plugin seems to do the trick. Better yet, Superadmins can enable the plugin on a site-by-site basis.

Works great!

By mbnwk323 on January 30, 2020

I have a Wordpress Multisite install and found that our editors and sub-site admins could not longer embed videos in an Advanced Custom Field ( An update to that plugin changed it's behavior ). I tried 3 different roles and capabilities editors and none of them worked. Then I tried this plugin and it fixed the problem immediately. Thanks!!!

Working with Wordpress 4.9.8

By nastysquar3d on October 26, 2018

I have a multi-site installation with Wordpress 4.9.8. A user setup as an "administrator" wasn't able to put iframe (google maps) and script tags (embedded hubspot form) in the WYSIWYG editor without them being stripped out. Installed this plugin, all is good now. I'm not surprised it still works even if it hasn't been updated in years. It's made by Automaticc. Automaticc made Wordpress. This isn't some third party garbage plugin.

working ok

By kOoLiNuS on April 20, 2017

It works (tried on a multisite with many P2 instances). The main problem is that people successfully using any plugin do not vote &/or comment it to let know the real status of them.

Still works! March 2017

By adaldesign on March 30, 2017

I love when plugins are so cleanly written and do their trick without hassle. Especially after 8 years of no updates. Though they should submit an update just to remove the "2 years old" warning...

Does what it says

By Brian Shim (brianrshim) on September 3, 2016

Worked great for me.

Brian

Nice!

By rinogo on February 7, 2017

Looks like this plugin still does the trick. If it doesn't work for you or you'd rather not use a plugin, getting this functionality can be as simple as calling:

kses_remove_filters()

For more info, check out my blog post about how to disable kses. (http://endorkins.com/2013/08/27/disable-wordpress-kses-to-prevent-html-filtering/)

If you want to enable this feature on all blogs on your MU site:

  1. Place the unfiltered-mu.php file in your wp-content/mu-plugins/ directory. That’s it. Removing the plugin will remove the capability.

If you want to enable this feature on a blog-by-blog basis:

  1. Place the unfiltered-mu.php file in your wp-content/plugins/ directory.
  2. Activate this plugin for those blogs on which you want this feature enabled or enable it sitewide with the “network activate” feature. Deactivating the plugin will remove the capablitiy for that blog.

Reviews

4.9 out of 5 stars

  • Version: 1.3.1
  • Last updated: 5 years ago
  • Active installations: 2K
  • WordPress version: 2.9.2
  • Tested up to: 5.0.22
  • PHP version: false