by masseym 0 (0 reviews)

MMCRA Toolkit

Name: MMCRA Toolkit
Author: masseym

EU CRA compliance for WordPress plugins. Generate the SBOM, VDP, and Declaration of Conformity the EU Cyber Resilience Act requires.

MMCRA Toolkit ranks #64,044 among WordPress.org plugins with 0+ active installations, and was last updated Jul 5, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 7.0.6 (Current: 7.1.2)

v1.0.0 Current Version v1.0.0

Updated 2 months ago Last Update on 05 Jul, 2026

Refreshed 8 hours ago Last Refreshed on

View on WordPress.org

Rank

#64,044

— No change

Active Installs

-100%

KW Avg Position

26.5

0.7 worse

Downloads

213

+5 today

Support Resolved

— No change

Rating

Review 0 out of 5

0 (0 reviews)

Next Milestone 10

Total Progress 10%

0+ 10+

44,304

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 9 more installs to reach 10+

Rank Changes

Current #64,044

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

0.0

0 reviews

Overall 0%

0 (0%)

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 1.0.0
Last Updated: Jul 05, 2026
Requires WP: 6.2+
Tested Up To: 7.0.6
PHP Version: 7.4 or higher
Author: masseym

Support & Rating

Rating: ☆ ☆ ☆ ☆ ☆ 0
Reviews: 0
Support Threads: 0
Resolved: 0%

Keywords

compliance cra CycloneDX sbom vulnerability-disclosure

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,760

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

30K+ installs

#1,009

Frequently Asked Questions

Common questions about MMCRA Toolkit

The EU Cyber Resilience Act (Regulation 2024/2847) applies to any commercial digital product placed on the EU market. For a plugin developer that means you need to identify your manufacturer entity, produce a Software Bill of Materials, publish a coordinated vulnerability disclosure policy, and ship a signed Declaration of Conformity per product. From September 11, 2026, you also have to report actively exploited vulnerabilities to ENISA within 24 hours.

The CRA applies to any product placed on the EU market. If you sell to EU customers — directly or through a marketplace — you're in scope. If you only sell to non-EU customers, the CRA does not apply, but the technical artifacts the toolkit produces are still useful as evidence of secure development practice.

The free version generates SBOMs, Disclosure Policies, and Declarations of Conformity for every plugin you have installed — no plugin limit. Pro adds ongoing weekly OSV.dev vulnerability monitoring (tiered by how many plugins you monitor), incident tracking, AI-assisted triage and drafting, PDF audit reports, and the single-zip Compliance Bundle export for regulator handoff.

Yes. The toolkit outputs CycloneDX 1.6 JSON, which is one of the two SBOM formats explicitly named in the CRA's harmonised standards. The same format works with OWASP Dependency-Track, GitHub Advanced Security, and most enterprise procurement portals.

In a custom table in your WordPress database (wp_mmcra_audit_log). Every artifact written by the toolkit is recorded with timestamp, user, plugin slug, path, and the SHA-256 of the content at write time. This gives you tamper-evident evidence that you produced the file on the date it claims.

No. The free plugin operates entirely on your WordPress install. No telemetry, no phone-home, no third-party API calls. Pro optionally talks to OSV.dev (Google's open-source vulnerability database) for weekly monitoring and to Anthropic's Claude API for AI-assisted triage, both opt-in.

Because the CRA is unfamiliar territory for most plugin developers. The wizard explains what each step is, why the CRA requires it, and what happens if you skip it. You can re-run it any time from CRA Toolkit → Setup Wizard.

MMCRA Toolkit

Next Milestone 10

Unlock Exact Install Count

Rank Changes

Upgrade to Pro

Active Installs Growth

Downloads Growth

Upgrade to Pro

Reviews & Ratings

Track This Plugin

Plugin Details

Support & Rating

Keywords

Upgrade to Pro

Similar Plugins

Frequently Asked Questions

Sign In / Register