Admin Top-Menu Security & Risk Analysis

wordpress.org/plugins/admin-top-menu

Move any menu items from the sidebar to the admin bar - to the new dropdown Top-Menu.

10 active installs v1.0 PHP + WP 4.0.1+ Updated Oct 4, 2016
adminadmin-menuadmin-sidebarsidebartop-menu
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Admin Top-Menu Safe to Use in 2026?

Generally Safe

Score 85/100

Admin Top-Menu has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The "admin-top-menu" v1.0 plugin presents a generally good security posture, with no recorded vulnerabilities or critical code signals. The static analysis reveals strong adherence to security best practices, including 100% of SQL queries using prepared statements and a significant number of capability checks (8). The absence of critical or high severity taint flows and a low percentage of unsanitized paths (1 flow out of 6) are also positive indicators. However, there are areas for improvement. A considerable portion (49%) of output is not properly escaped, which could lead to Cross-Site Scripting (XSS) vulnerabilities if user-supplied data is involved in these outputs. Additionally, the presence of file operations (10) and external HTTP requests (4) without explicit context in the provided data warrants attention, as these can be potential attack vectors if not handled with extreme care.

The vulnerability history is clean, with no recorded CVEs, indicating a potentially mature and well-maintained codebase or a lack of targeted exploitation. This, combined with the other positive code signals, suggests a relatively low immediate risk. However, the unescaped output is a significant concern that could be exploited. The limited number of entry points and the absence of unprotected ones are strengths, but the focus should now be on refining the output escaping to mitigate potential XSS risks and thoroughly reviewing the file operations and external HTTP requests for any implicit vulnerabilities.

Key Concerns

  • Significant percentage of unescaped output
Vulnerabilities
None known

Admin Top-Menu Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Admin Top-Menu Release Timeline

No version history available.
Code Analysis
Analyzed Mar 16, 2026

Admin Top-Menu Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
1 prepared
Unescaped Output
44
46 escaped
Nonce Checks
2
Capability Checks
8
File Operations
10
External Requests
4
Bundled Libraries
0

SQL Query Safety

100% prepared1 total queries

Output Escaping

51% escaped90 total outputs
Data Flows · Security
5 unsanitized

Data Flow Analysis

6 flows5 with unsanitized paths
_replyToPrintColumnCell (library\apf\factory\taxonomy_field\AdminPageFramework_TaxonomyField.php:123)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Admin Top-Menu Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 86
actionadmin_headadmin-top-menu.php:36
actionadmin_menuadmin-top-menu.php:37
actionadmin_bar_menuadmin-top-menu.php:38
actionsubmit_after_DencodesAdminTopMenuSettingsadmin-top-menu.php:39
actionload_after_DencodesAdminTopMenuSettingsadmin-top-menu.php:40
actionplugins_loadedadmin-top-menu.php:41
actionwp_loadedlibrary\apf\factory\admin_page\AdminPageFramework.php:18
actionadmin_headlibrary\apf\factory\admin_page\_controller\AdminPageFramework_HelpPane_admin_page.php:14
filterplugin_row_metalibrary\apf\factory\admin_page\_controller\AdminPageFramework_Link_admin_page.php:21
filterwp_mail_content_typelibrary\apf\factory\admin_page\_model\AdminPageFramework_FormEmail.php:23
filterwp_mail_fromlibrary\apf\factory\admin_page\_model\AdminPageFramework_FormEmail.php:26
filterwp_mail_from_namelibrary\apf\factory\admin_page\_model\AdminPageFramework_FormEmail.php:29
actioncurrent_screenlibrary\apf\factory\admin_page\_model\delegate\AdminPageFramework_Model_Menu__RegisterMenu.php:91
filterupdate_footerlibrary\apf\factory\admin_page\_view\AdminPageFramework_PageLoadInfo_admin_page.php:18
actionadmin_headlibrary\apf\factory\admin_page\_view\AdminPageFramework_View__PageMetaboxEnabler.php:11
filterwp_insert_attachment_datalibrary\apf\factory\meta_box\AdminPageFramework_MetaBox.php:46
filterwp_insert_post_datalibrary\apf\factory\meta_box\AdminPageFramework_MetaBox.php:48
filterredirect_post_locationlibrary\apf\factory\meta_box\AdminPageFramework_MetaBox.php:85
actionin_admin_footerlibrary\apf\factory\network_admin_page\_view\AdminPageFramework_PageLoadInfo_network_admin_page.php:12
filterupdate_footerlibrary\apf\factory\network_admin_page\_view\AdminPageFramework_PageLoadInfo_network_admin_page.php:27
actionadmin_enqueue_scriptslibrary\apf\factory\post_type\AdminPageFramework_PostType.php:69
actionadmin_menulibrary\apf\factory\post_type\AdminPageFramework_PostType.php:124
actionthe_contentlibrary\apf\factory\post_type\AdminPageFramework_PostType.php:126
actionrestrict_manage_postslibrary\apf\factory\post_type\AdminPageFramework_PostType.php:129
actionrestrict_manage_postslibrary\apf\factory\post_type\AdminPageFramework_PostType.php:130
filterparse_querylibrary\apf\factory\post_type\AdminPageFramework_PostType.php:131
filterpost_row_actionslibrary\apf\factory\post_type\AdminPageFramework_PostType.php:132
actionadmin_headlibrary\apf\factory\post_type\AdminPageFramework_PostType.php:133
actioninitlibrary\apf\factory\post_type\AdminPageFramework_PostType.php:292
actionget_edit_post_linklibrary\apf\factory\post_type\_controller\AdminPageFramework_Link_post_type.php:11
actionregistered_post_typelibrary\apf\factory\post_type\_model\AdminPageFramework_PostType_Model__FlushRewriteRules.php:15
actionshutdownlibrary\apf\factory\post_type\_model\AdminPageFramework_PostType_Model__FlushRewriteRules.php:34
actionadmin_menulibrary\apf\factory\post_type\_model\AdminPageFramework_PostType_Model__SubMenuOrder.php:14
actionadmin_menulibrary\apf\factory\post_type\_model\AdminPageFramework_PostType_Model__SubMenuOrder.php:15
filterupdate_footerlibrary\apf\factory\post_type\_view\AdminPageFramework_PageLoadInfo_post_type.php:21
actionshow_user_profilelibrary\apf\factory\user_meta\AdminPageFramework_UserMeta.php:23
actionedit_user_profilelibrary\apf\factory\user_meta\AdminPageFramework_UserMeta.php:24
actionuser_new_formlibrary\apf\factory\user_meta\AdminPageFramework_UserMeta.php:25
actionpersonal_options_updatelibrary\apf\factory\user_meta\AdminPageFramework_UserMeta.php:26
actionedit_user_profile_updatelibrary\apf\factory\user_meta\AdminPageFramework_UserMeta.php:27
actionuser_registerlibrary\apf\factory\user_meta\AdminPageFramework_UserMeta.php:28
actionshutdownlibrary\apf\factory\_common\form\errors\AdminPageFramework_Form___FieldError.php:27
actionshutdownlibrary\apf\factory\_common\form\errors\AdminPageFramework_Form___FieldError.php:46
filtermedia_upload_tabslibrary\apf\factory\_common\form\field_type\AdminPageFramework_FieldType_color.php:81
filtergettextlibrary\apf\factory\_common\form\field_type\AdminPageFramework_FieldType_color.php:91
actionshutdownlibrary\apf\factory\_common\form\notice\AdminPageFramework_Form___SubmitNotice.php:30
actionshutdownlibrary\apf\factory\_common\form\_model\AdminPageFramework_Form_Model___LastInput.php:24
actionshutdownlibrary\apf\factory\_common\form\_model\AdminPageFramework_Form_Model___LastInput.php:49
actionwp_enqueue_scriptslibrary\apf\factory\_common\form\_view\resource\AdminPageFramework_Form_View__Resource.php:24
actionwp_enqueue_scriptslibrary\apf\factory\_common\form\_view\resource\AdminPageFramework_Form_View__Resource.php:25
actionwp_footerlibrary\apf\factory\_common\form\_view\resource\AdminPageFramework_Form_View__Resource.php:28
actionwp_footerlibrary\apf\factory\_common\form\_view\resource\AdminPageFramework_Form_View__Resource.php:29
actionwp_print_footer_scriptslibrary\apf\factory\_common\form\_view\resource\AdminPageFramework_Form_View__Resource.php:30
actionwp_print_footer_scriptslibrary\apf\factory\_common\form\_view\resource\AdminPageFramework_Form_View__Resource.php:31
actionadmin_enqueue_scriptslibrary\apf\factory\_common\form\_view\resource\AdminPageFramework_Form_View__Resource.php:35
actionadmin_enqueue_scriptslibrary\apf\factory\_common\form\_view\resource\AdminPageFramework_Form_View__Resource.php:36
actioncustomize_controls_print_footer_scriptslibrary\apf\factory\_common\form\_view\resource\AdminPageFramework_Form_View__Resource.php:39
actioncustomize_controls_print_footer_scriptslibrary\apf\factory\_common\form\_view\resource\AdminPageFramework_Form_View__Resource.php:40
actionadmin_footerlibrary\apf\factory\_common\form\_view\resource\AdminPageFramework_Form_View__Resource.php:41
actionadmin_footerlibrary\apf\factory\_common\form\_view\resource\AdminPageFramework_Form_View__Resource.php:42
actionadmin_print_footer_scriptslibrary\apf\factory\_common\form\_view\resource\AdminPageFramework_Form_View__Resource.php:43
actionadmin_print_footer_scriptslibrary\apf\factory\_common\form\_view\resource\AdminPageFramework_Form_View__Resource.php:44
actionadmin_footerlibrary\apf\factory\_common\form\_view\script\AdminPageFramework_Form_View___Script_MediaUploader.php:11
actioncurrent_screenlibrary\apf\factory\_common\_abstract\AdminPageFramework_Factory.php:32
actionadmin_headlibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_HelpPane_Base.php:12
actionin_admin_footerlibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_Link_Base.php:16
filteradmin_footer_textlibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_Link_Base.php:62
filterupdate_footerlibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_Link_Base.php:63
actionadmin_enqueue_scriptslibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_Resource_Base.php:20
actionadmin_enqueue_scriptslibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_Resource_Base.php:21
actioncustomize_controls_print_footer_scriptslibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_Resource_Base.php:24
actioncustomize_controls_print_footer_scriptslibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_Resource_Base.php:25
actionadmin_footerlibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_Resource_Base.php:26
actionadmin_footerlibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_Resource_Base.php:27
actionadmin_print_footer_scriptslibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_Resource_Base.php:28
actionadmin_print_footer_scriptslibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_Resource_Base.php:29
filterscript_loader_srclibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_Resource_Base.php:30
filterstyle_loader_srclibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_Resource_Base.php:31
filterclean_urllibrary\apf\factory\_common\_abstract\_controller\AdminPageFramework_Resource_Base.php:43
actionwp_enqueue_scriptslibrary\apf\factory\_common\_abstract\_view\AdminPageFramework_Factory___Script_Base.php:17
actionin_admin_footerlibrary\apf\factory\_common\_abstract\_view\AdminPageFramework_PageLoadInfo_Base.php:21
actioninitlibrary\apf\utility\plugin_bootstrap\AdminPageFramework_PluginBootstrap.php:34
actionadmin_enqueue_scriptslibrary\apf\utility\pointer_tool_tip\AdminPageFramework_PointerToolTip.php:32
actionadmin_print_footer_scriptslibrary\apf\utility\pointer_tool_tip\AdminPageFramework_PointerToolTip.php:99
actionadmin_noticeslibrary\apf\utility\requirement\AdminPageFramework_Requirement.php:74
actionadmin_noticeslibrary\apf\utility\requirement\AdminPageFramework_Requirement.php:92
Maintenance & Trust

Admin Top-Menu Maintenance & Trust

Maintenance Signals

WordPress version tested4.6.30
Last updatedOct 4, 2016
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Admin Top-Menu Developer Profile

Denis Tkach

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Admin Top-Menu

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/admin-top-menu/admin-top-menu.css

HTML / DOM Fingerprints

CSS Classes
dencodes_atp
HTML Comments
Admin Top-MenuMove any items from the admin sidebar-menu to the new dropdown Top-Menu, located in the Admin Bar.Author: Denis Tkach (Dencodes)<!-- Add/remove menu-items... -->+1 more
Data Attributes
data-setting-page-slug="dcs_admin_top_menu"
FAQ

Frequently Asked Questions about Admin Top-Menu