Disable Plugins, Themes and Core Updates Security & Risk Analysis

wordpress.org/plugins/disable-wp-automatic-updates

This plugin disable plugins, themes and core updates for WordPress and also the notifications.

0 active installs v1.0 PHP 5.6+ WP 2.8+ Updated Dec 10, 2018
auto-updatecoredisablethemeupdates
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Disable Plugins, Themes and Core Updates Safe to Use in 2026?

Generally Safe

Score 85/100

Disable Plugins, Themes and Core Updates has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago
Risk Assessment

The "disable-wp-automatic-updates" v1.0 plugin exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any detected AJAX handlers, REST API routes, shortcodes, or cron events with unprotected entry points indicates a minimal attack surface. Furthermore, the code signals show a commitment to secure coding practices with 100% of SQL queries using prepared statements and all outputs being properly escaped. The lack of any recorded vulnerabilities, CVEs, or common vulnerability types further reinforces this positive outlook, suggesting a well-maintained and secure codebase.

Key Concerns

  • Presence of 'unserialize' function
  • Missing capability checks
  • Missing nonce checks
Vulnerabilities
None known

Disable Plugins, Themes and Core Updates Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Disable Plugins, Themes and Core Updates Code Analysis

Dangerous Functions
2
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Dangerous Functions Found

unserialize$plugins = unserialize($r['body']['plugins']);disable-wp-updates.php:63
unserialize$themes = unserialize( $r['body']['themes'] );disable-wp-updates.php:77
Attack Surface

Disable Plugins, Themes and Core Updates Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 10
actionadmin_initdisable-wp-updates.php:24
filterpre_site_transient_update_coredisable-wp-updates.php:41
filterauto_update_coredisable-wp-updates.php:42
filterallow_dev_auto_core_updatesdisable-wp-updates.php:43
filterallow_minor_auto_core_updatesdisable-wp-updates.php:44
filterallow_major_auto_core_updatesdisable-wp-updates.php:45
filtersite_transient_update_themesdisable-wp-updates.php:48
filtersite_transient_update_pluginsdisable-wp-updates.php:50
filterhttp_request_argsdisable-wp-updates.php:52
filterhttp_request_argsdisable-wp-updates.php:54
Maintenance & Trust

Disable Plugins, Themes and Core Updates Maintenance & Trust

Maintenance Signals

WordPress version tested5.0.25
Last updatedDec 10, 2018
PHP min version5.6
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Disable Plugins, Themes and Core Updates Developer Profile

Ciprian Craciun

1 plugin · 0 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Disable Plugins, Themes and Core Updates

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Disable Plugins, Themes and Core Updates