Disable All WordPress Updates Security & Risk Analysis

wordpress.org/plugins/disable-wordpress-updates

Disables the theme, plugin and core update checking, the related cronjobs, plugin/theme update health checks and notification system.

20K active installs v1.9.1 PHP 7.4+ WP 3.8+ Updated Feb 15, 2026
disable-updatesthemeupdateupdate-control
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Disable All WordPress Updates Safe to Use in 2026?

Generally Safe

Score 100/100

Disable All WordPress Updates has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "disable-wordpress-updates" plugin version 1.9.1 exhibits an exceptionally strong security posture based on the provided static analysis and vulnerability history. The complete absence of identified attack vectors, dangerous functions, unsanitized taint flows, and raw SQL queries demonstrates a commitment to secure coding practices. The plugin also leverages capability checks appropriately. Furthermore, its vulnerability history is clean, with no recorded CVEs, indicating a history of stability and security. The lack of external HTTP requests and file operations also minimizes potential attack surfaces. There are no apparent weaknesses or concerns to report from the provided data, making this plugin appear highly secure.

Vulnerabilities
None known

Disable All WordPress Updates Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Disable All WordPress Updates Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Disable All WordPress Updates Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 29
actionadmin_initdisable-updates.php:64
filterpre_transient_update_themesdisable-updates.php:70
filterpre_site_transient_update_themesdisable-updates.php:74
actionpre_transient_update_pluginsdisable-updates.php:81
filterpre_site_transient_update_pluginsdisable-updates.php:85
filterpre_transient_update_coredisable-updates.php:92
filterpre_site_transient_update_coredisable-updates.php:96
actionschedule_eventdisable-updates.php:104
actionpre_set_site_transient_update_pluginsdisable-updates.php:106
actionpre_set_site_transient_update_themesdisable-updates.php:107
filterauto_update_translationdisable-updates.php:115
filterautomatic_updater_disableddisable-updates.php:116
filterallow_minor_auto_core_updatesdisable-updates.php:117
filterallow_major_auto_core_updatesdisable-updates.php:118
filterallow_dev_auto_core_updatesdisable-updates.php:119
filterauto_update_coredisable-updates.php:120
filterwp_auto_update_coredisable-updates.php:121
filterauto_core_update_send_emaildisable-updates.php:122
filtersend_core_update_notification_emaildisable-updates.php:123
filterauto_update_plugindisable-updates.php:124
filterauto_update_themedisable-updates.php:125
filterautomatic_updates_send_debug_emaildisable-updates.php:126
filterautomatic_updates_is_vcs_checkoutdisable-updates.php:127
filterautomatic_updates_send_debug_email disable-updates.php:132
filterpre_http_requestdisable-updates.php:136
actionadmin_bar_menudisable-updates.php:150
actionadmin_enqueue_scriptsdisable-updates.php:151
filtersite_status_testsdisable-updates.php:163
filterpre_option_update_coredisable-updates.php:209
Maintenance & Trust

Disable All WordPress Updates Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.99
Last updatedFeb 15, 2026
PHP min version7.4
Downloads843K

Community Trust

Rating96/100
Number of ratings68
Active installs20K
Developer Profile

Disable All WordPress Updates Developer Profile

wpseek

7 plugins · 79K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
728 days
View full developer profile
Detection Fingerprints

How We Detect Disable All WordPress Updates

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/disable-wordpress-updates/css/admin-bar-notice.css/wp-content/plugins/disable-wordpress-updates/js/admin-bar-notice.js
Script Paths
/wp-content/plugins/disable-wordpress-updates/js/admin-bar-notice.js
Version Parameters
disable-wordpress-updates/css/admin-bar-notice.css?ver=disable-wordpress-updates/js/admin-bar-notice.js?ver=

HTML / DOM Fingerprints

CSS Classes
wp-admin-bar-dwuos-notice
Data Attributes
aria-hidden="true"
FAQ

Frequently Asked Questions about Disable All WordPress Updates