WP-Safety

Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes Security & Risk Analysis

wordpress.org/plugins/disable-email-notification-for-auto-updates

This plugin disables email notifications for auto-updates and blocks updates for specific plugins, hide plugins, WordPress core, and themes.

3K active installs v1.0.5 PHP 7.0+ WP 5.5+ Updated Dec 4, 2025
block-specific-plugin-updatesblock-themes-updatesblock-wordpress-core-updatesdisable-update-notification-emailshide-updates-from-dashboard
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes Safe to Use in 2026?

Generally Safe

Score 100/100

Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The 'disable-email-notification-for-auto-updates' plugin exhibits a generally good security posture in its current version (v1.0.5), particularly regarding SQL queries and output escaping, which are all handled correctly. The absence of known vulnerabilities and the lack of dangerous code signals are positive indicators. However, a significant concern arises from the presence of one AJAX handler that lacks authentication checks. This creates a potential entry point for attackers to trigger actions within the plugin without proper authorization. While taint analysis showed no critical or high severity flows, the unprotected AJAX endpoint remains a notable weakness that could be exploited if it controls sensitive functionality.

Key Concerns

  • AJAX handler without authentication check
Vulnerabilities
None known

Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
104 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped104 total outputs
Attack Surface
1 unprotected

Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes Attack Surface

Entry Points1
Unprotected1

AJAX Handlers 1

authwp_ajax_itc_disable_update_notifications_dismissedincludes\class-itc.php:121
WordPress Hooks 24
actionadmin_noticesadmin\class-admin.php:11
actionadmin_initadmin\class-admin.php:12
actionplugins_loadedincludes\class-itc.php:48
filterauto_plugin_update_send_emailincludes\class-itc.php:56
filterauto_theme_update_send_emailincludes\class-itc.php:60
filterauto_core_update_send_emailincludes\class-itc.php:66
actionadmin_menuincludes\class-itc.php:73
actioninitincludes\class-itc.php:80
filterpre_site_transient_update_coreincludes\class-itc.php:81
filtersite_status_testsincludes\class-itc.php:82
filterpre_site_transient_update_themesincludes\class-itc.php:89
filtersite_status_testsincludes\class-itc.php:90
actioninitincludes\class-itc.php:91
filtersite_transient_update_pluginsincludes\class-itc.php:99
filterauto_update_pluginincludes\class-itc.php:100
actionadmin_headincludes\class-itc.php:101
filterall_pluginsincludes\class-itc.php:109
actionadmin_enqueue_scriptsincludes\class-itc.php:116
actionadmin_enqueue_scriptsincludes\class-itc.php:117
actionadmin_menuincludes\class-itc.php:118
actionadmin_initincludes\class-itc.php:119
actionadmin_noticesincludes\class-itc.php:123
actionwp_enqueue_scriptsincludes\class-itc.php:130
actionwp_enqueue_scriptsincludes\class-itc.php:131
Maintenance & Trust

Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 4, 2025
PHP min version7.0
Downloads16K

Community Trust

Rating100/100
Number of ratings2
Active installs3K
Alternatives

Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes Alternatives

No alternatives data available yet.

Developer Profile

Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes Developer Profile

ideasToCode

5 plugins · 13K total installs

78
trust score
Avg Security Score
98/100
Avg Patch Time
390 days
View full developer profile
Detection Fingerprints

How We Detect Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/disable-email-notification-for-auto-updates/admin/css/itc-disable-update-notifications-admin.css
Script Paths
/wp-content/plugins/disable-email-notification-for-auto-updates/admin/js/itc-disable-update-notifications-admin.js
Version Parameters
itc-disable_update_notifications-admin-css?ver=itc-disable_update_notifications-admin-js?ver=

HTML / DOM Fingerprints

JS Globals
ITC_Disable_Update_Notifications_Admin
FAQ

Frequently Asked Questions about Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes