
Allow wp-admin access Security & Risk Analysis
wordpress.org/plugins/allow-wp-admin-accessThe plugin enable the admin users to allow admin access whose IP address is mentioned in the “WP-admin Access Allow Settings.”
Is Allow wp-admin access Safe to Use in 2026?
Generally Safe
Score 92/100Allow wp-admin access has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.
The 'allow-wp-admin-access' plugin v1.0.3 exhibits a generally strong security posture based on the provided static analysis. The absence of any AJAX handlers, REST API routes, shortcodes, or cron events significantly limits the plugin's attack surface. Furthermore, the code demonstrates good practices by utilizing prepared statements for all SQL queries and having a high percentage of properly escaped output. The lack of dangerous function calls, file operations, external HTTP requests, nonce checks, and capability checks in the analyzed code suggests a well-contained and relatively simple plugin.
Key Concerns
- Missing Nonce Checks
- Missing Capability Checks
- Unescaped Output (Minor)
Allow wp-admin access Security Vulnerabilities
Allow wp-admin access Code Analysis
Output Escaping
Allow wp-admin access Attack Surface
WordPress Hooks 5
Maintenance & Trust
Allow wp-admin access Maintenance & Trust
Maintenance Signals
Community Trust
Allow wp-admin access Developer Profile
14 plugins · 7K total installs
How We Detect Allow wp-admin access
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/allow-wp-admin-access/assets/css/awa-admin-style.css/wp-content/plugins/allow-wp-admin-access/assets/js/awa-admin-script.js/wp-content/plugins/allow-wp-admin-access/assets/js/awa-admin-script.jsallow-wp-admin-access/assets/css/awa-admin-style.css?ver=allow-wp-admin-access/assets/js/awa-admin-script.js?ver=