[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjcTVuO8qQhCu2a_J9ssrXf_ehCVSDuDJ_vh4SfIPkmw":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":18,"download_link":22,"security_score":23,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":35,"analysis":128,"fingerprints":190},"admin-user-message","Admin User Message","0.0.9","Jonathan Bardo","https:\u002F\u002Fprofiles.wordpress.org\u002Fjonathanbardo\u002F","\u003Cp>\u003Cstrong>Note: This plugin only works with WordPress 4.2 or higher\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin will enable the site administrator to easily create an admin message present on all pages. The admin has the option to let the user dismiss the message for the duration of his session.\u003C\u002Fp>\n","Add message to users of your site. Choose wheter they can dismiss it or not.",200,8508,94,3,"2015-11-24T04:43:00.000Z","4.4.34","4.2","",[20,21],"admin","message","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadmin-user-message.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":23,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"jonathanbardo",5,710,30,84,"2026-04-04T07:55:46.728Z",[36,56,74,93,111],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":11,"downloaded":44,"rating":45,"num_ratings":46,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":18,"tags":50,"homepage":54,"download_link":55,"security_score":23,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"hide-update-reminder-message","Hide Update Reminder Message","2.0","sumitbansal054","https:\u002F\u002Fprofiles.wordpress.org\u002Fsumitengg01\u002F","\u003Cp>With the use of this plugin you can hides update reminder message from the WordPress Admin for all non admin users and for Admin also.\u003C\u002Fp>\n\u003Cp>You can change the setting from the WordPress Admin to show the update reminder message will hide only for only non admin users or Admin to.\u003C\u002Fp>\n\u003Cp>For more information or any query please \u003Ca href=\"http:\u002F\u002Fsumitbansal.com\u002Fwordpress-plugin\u002Fhide-update-reminder-message\u002F\" rel=\"nofollow ugc\">click here\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>Support is provided at http:\u002F\u002Fsumitbansal.com\u002Fwordpress-plugin\u002Fhide-update-reminder-message\u002F\u003C\u002Fp>\n","Hides the Update Reminder in the Admin for all non Admin users.",7377,100,2,"2020-02-29T08:27:00.000Z","5.3.21","2.5",[20,51,52,53],"cms","hide-update-message","upgrade","http:\u002F\u002Fsumitbansal.com\u002Fwordpress-plugin\u002Fhide-update-reminder-message\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhide-update-reminder-message.zip",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":45,"downloaded":64,"rating":65,"num_ratings":30,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":18,"tags":69,"homepage":61,"download_link":73,"security_score":23,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"custom-dashboard-messages","Zedna Custom Dashboard Messages","2.2.2","Radek Mezulanik","https:\u002F\u002Fprofiles.wordpress.org\u002Fzedna\u002F","\u003Cp>You can write a main message, visible to everybody in dashboard widget. You can also write a bunch of messages in different dashboard widget, visible for all users with rights.\u003Cbr \u002F>\nAdmin can read and write all the messages and setup user roles, who can read and write custom messages.\u003C\u002Fp>\n","Allow admin to write messages on user dashboard.",4392,76,"2020-12-22T14:21:00.000Z","5.6.0","5.0.0",[20,70,71,21,72],"custom","dashoard","user","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-dashboard-messages.zip",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":82,"downloaded":83,"rating":24,"num_ratings":24,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":18,"tags":87,"homepage":91,"download_link":92,"security_score":23,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"dashboard-message-for-wordpress","Dashboard Message","1.0","Nicolas Bouliane","https:\u002F\u002Fprofiles.wordpress.org\u002Fn1c0_ds\u002F","\u003Cp>Displays a custom message on the dashboard with full HTML\u002FPHP\u002FJavaScript support. Useful for administrator who have clients as users.\u003C\u002Fp>\n\u003Cp>The plugin will display anything that’s in the message.php file in the plugin’s directory. Since the plugin uses a simple include,\u003Cbr \u002F>\nany kind of content is supported.\u003C\u002Fp>\n","Displays a custom message on the dashboard with full HTML\u002FPHP\u002FJavaScript support. Useful for administrator who have clients as users.",20,4445,"2010-07-27T04:33:00.000Z","3.0.5","2.0.2",[20,88,89,21,90],"administrator","dashboard","widget","http:\u002F\u002Fnicolasbouliane.com\u002Fplugins\u002Fdashboard-message","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdashboard-message-for-wordpress.zip",{"slug":94,"name":95,"version":96,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":101,"downloaded":102,"rating":24,"num_ratings":24,"last_updated":103,"tested_up_to":104,"requires_at_least":105,"requires_php":18,"tags":106,"homepage":109,"download_link":110,"security_score":23,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"ocws-admin-bar-greeting","OCWS Admin Bar Greeting","1.6","Paul Taylor","https:\u002F\u002Fprofiles.wordpress.org\u002Fpftaylor61\u002F","\u003Cp>Aren’t you irritated by the greeting on the right of the Admin Bar? By default, it greets you with a nauseating “howdy”.\u003C\u002Fp>\n\u003Cp>This is the plugin to sort that issue out. This plugin changes the default greeting to “Welcome”, a greeting which combines formality with warmth. However, the plugin also provides an options page, so that users can have their own preferred greetings.\u003C\u002Fp>\n\u003Cp>This plugin, and others, can be found on the plugins page of \u003Ca href=\"http:\u002F\u002Fwww.oldcastleweb.com\u002Fpws\u002Fplugins\u002F\" rel=\"nofollow ugc\">Old Castle Web Solutions\u003C\u002Fa> (www.oldcastleweb.com).\u003C\u002Fp>\n\u003Cp>Further work on this plugin should enable a general framework for all my plugins, giving them a top level menu page and sidebar entry of their own, regardless of which plugin is installed first.\u003C\u002Fp>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n\u003Cp>I have no arbitrary comments to make. What’s the weather like where you are?\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php code(); \u002F\u002F goes in backticks ?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","This plugin enables the user to replace the ‘howdy’ greeting on the admin bar.",10,1914,"2016-07-28T01:02:00.000Z","4.6.30","3.2",[107,108],"admin-bar","greeting-message","http:\u002F\u002Foldcastleweb.com\u002Fpws\u002Fplugins","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Focws-admin-bar-greeting.1.6.zip",{"slug":112,"name":113,"version":114,"author":115,"author_profile":116,"description":117,"short_description":118,"active_installs":101,"downloaded":119,"rating":24,"num_ratings":24,"last_updated":120,"tested_up_to":121,"requires_at_least":122,"requires_php":18,"tags":123,"homepage":126,"download_link":127,"security_score":23,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"post-updated-messages","Post Updated Messages","1.0.2","Morgan Estes","https:\u002F\u002Fprofiles.wordpress.org\u002Fmorganestes\u002F","\u003Cp>Changes the default “Post updated” message to reflect the actual post type. It uses the labels set when a\u003Cbr \u002F>\npost type is registered to display “My Post Type updated”.\u003C\u002Fp>\n\u003Ch3>Cow Picture\u003C\u002Fh3>\n\u003Cpre>\u003Ccode> ______________________________\n\u003C Post Updated Messages Rocks! >\n ------------------------------\n        \\   ^__^\n         \\  (oo)\\_______\n            (__)\\       )\\\u002F\\\n                ||----w |\n                ||     ||\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Tailored updated messages for custom post types.",1383,"2018-02-22T00:29:00.000Z","4.9.29","3.7.0",[20,124,125],"custom-post-types","post-messages","https:\u002F\u002Fmorganestes.com\u002Fplugins\u002Fpost-updated-messages\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpost-updated-messages.1.0.2.zip",{"attackSurface":129,"codeSignals":168,"taintFlows":180,"riskAssessment":181,"analyzedAt":189},{"hooks":130,"ajaxHandlers":157,"restRoutes":164,"shortcodes":165,"cronEvents":166,"entryPointCount":167,"unprotectedCount":24},[131,137,141,145,150,154],{"type":132,"name":133,"callback":134,"file":135,"line":136},"action","admin_init","register_settings_fields","admin-user-message.php",38,{"type":132,"name":138,"callback":139,"file":135,"line":140},"admin_menu","register_settings_page",39,{"type":132,"name":142,"callback":143,"file":135,"line":144},"admin_notices","add_admin_notices",43,{"type":146,"name":147,"callback":148,"file":135,"line":149},"filter","attach_session_information","__return_empty_array",388,{"type":132,"name":151,"callback":152,"file":135,"line":153},"plugins_loaded","setup",396,{"type":132,"name":151,"callback":155,"priority":46,"file":135,"line":156},"i18n",397,[158],{"action":159,"nopriv":160,"callback":161,"hasNonce":162,"hasCapCheck":160,"file":135,"line":163},"admin_user_message_dismiss",false,"dismiss_message",true,44,[],[],[],1,{"dangerousFunctions":169,"sqlUsage":170,"outputEscaping":172,"fileOperations":167,"externalRequests":24,"nonceChecks":167,"capabilityChecks":24,"bundledLibraries":179},[],{"prepared":24,"raw":24,"locations":171},[],{"escaped":14,"rawEcho":46,"locations":173},[174,177],{"file":135,"line":175,"context":176},321,"raw output",{"file":135,"line":178,"context":176},327,[],[],{"summary":182,"deductions":183},"The \"admin-user-message\" plugin v0.0.9 presents a generally positive security posture based on the provided static analysis. The plugin demonstrates good practices by utilizing prepared statements for all SQL queries and implementing a nonce check for its single AJAX handler, indicating an effort to prevent common web vulnerabilities. The absence of critical or high severity taint flows, along with no recorded vulnerabilities in its history, further reinforces this perception of a well-secured plugin.\n\nHowever, there are areas for improvement. The plugin lacks capability checks on its AJAX handler, which could potentially allow any logged-in user, regardless of their role or permissions, to interact with this entry point. Additionally, 60% of output escaping is not ideal; while not a critical flaw on its own in this instance, it could become a vector for Cross-Site Scripting (XSS) if sensitive data were processed without proper sanitization. The presence of one file operation, while not inherently risky, warrants attention to ensure it's used securely and doesn't introduce unintended side effects or vulnerabilities.\n\nIn conclusion, the plugin is built with some strong security foundations, particularly in its database interactions and basic input validation. The primary concern lies in the lack of role-based access control for its administrative functionality. Addressing the output escaping and scrutinizing the file operation would further enhance its security, making it a more robust and trustworthy plugin.",[184,187],{"reason":185,"points":186},"Missing capability checks on AJAX handler",8,{"reason":188,"points":30},"Insufficient output escaping","2026-03-16T20:30:24.925Z",{"wat":191,"direct":197},{"assetPaths":192,"generatorPatterns":194,"scriptPaths":195,"versionParams":196},[193],"\u002Fwp-content\u002Fplugins\u002Fadmin-user-message\u002Fadmin-user-message.php",[],[],[],{"cssClasses":198,"htmlComments":200,"htmlAttributes":201,"restEndpoints":208,"jsGlobals":210,"shortcodeOutput":211},[4,199],"admin-user-message-update-nag",[],[202,203,204,205,206,207],"name=\"admin_user_message_active\"","name=\"admin_user_message_type\"","name=\"admin_user_message_content\"","name=\"admin_user_message_exclude[]\"","name=\"admin_user_message_dismiss\"","name=\"admin_user_message_reset\"",[209],"\u002Fwp-json\u002Fadmin-user-message\u002Fv1\u002Fdismiss",[],[]]