Disable Unused Block Editor Blocks Security & Risk Analysis

wordpress.org/plugins/disable-unused-block-editor-blocks

Remove unused or unwanted blocks from Gutenberg block editor

100 active installs v5.7 PHP 5.6+ WP 5.6+ Updated Dec 1, 2025
disable-gutenberg-blocksfind-used-and-unused-blocksgutenbergmanage-blocks
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Disable Unused Block Editor Blocks Safe to Use in 2026?

Generally Safe

Score 100/100

Disable Unused Block Editor Blocks has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The "disable-unused-block-editor-blocks" plugin v5.7 exhibits a generally good security posture with no identified vulnerabilities in its history and a strong implementation of security best practices in its static analysis. The plugin correctly implements nonce checks for all its AJAX handlers and has no publicly known CVEs. However, a significant concern arises from the presence of SQL queries that are not using prepared statements. While the total number of SQL queries is low, the absence of prepared statements for these queries introduces a risk of SQL injection vulnerabilities, especially if any of the data used in these queries originates from user input without proper sanitization. Although taint analysis did not reveal any unsanitized flows in this specific version, the lack of prepared statements remains a potential weakness that could be exploited in future updates or if input handling changes.

Key Concerns

  • Raw SQL queries without prepared statements
Vulnerabilities
None known

Disable Unused Block Editor Blocks Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Disable Unused Block Editor Blocks Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
0 prepared
Unescaped Output
1
3 escaped
Nonce Checks
4
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

0% prepared2 total queries

Output Escaping

75% escaped4 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
is_block_used (disable-unused-block-editor-blocks.php:219)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Disable Unused Block Editor Blocks Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 4

authwp_ajax_is_block_useddisable-unused-block-editor-blocks.php:46
authwp_ajax_enable_blocksdisable-unused-block-editor-blocks.php:47
authwp_ajax_disable_blocksdisable-unused-block-editor-blocks.php:48
authwp_ajax_dubeb_notice_dismisseddisable-unused-block-editor-blocks.php:50
WordPress Hooks 5
actionenqueue_block_editor_assetsdisable-unused-block-editor-blocks.php:42
actionadmin_menudisable-unused-block-editor-blocks.php:43
actionadmin_enqueue_scriptsdisable-unused-block-editor-blocks.php:44
actionadmin_noticesdisable-unused-block-editor-blocks.php:51
actionplugins_loadeddisable-unused-block-editor-blocks.php:284
Maintenance & Trust

Disable Unused Block Editor Blocks Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 1, 2025
PHP min version5.6
Downloads5K

Community Trust

Rating100/100
Number of ratings6
Active installs100
Developer Profile

Disable Unused Block Editor Blocks Developer Profile

kubiq

13 plugins · 136K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
468 days
View full developer profile
Detection Fingerprints

How We Detect Disable Unused Block Editor Blocks

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/disable-unused-block-editor-blocks/css/style.css/wp-content/plugins/disable-unused-block-editor-blocks/js/script.js/wp-content/plugins/disable-unused-block-editor-blocks/js/admin.js
Script Paths
/wp-content/plugins/disable-unused-block-editor-blocks/js/script.js/wp-content/plugins/disable-unused-block-editor-blocks/js/admin.js

HTML / DOM Fingerprints

CSS Classes
dubeb-noticedubeb_wrap
Data Attributes
name="show_core_blocks"id="show_core_blocks_label"id="dubeb_wrap"id="react_icon"id="your-blocks"
JS Globals
dubeb_blocks
REST Endpoints
/wp-json/dubeb/v1/usage
FAQ

Frequently Asked Questions about Disable Unused Block Editor Blocks