Disabler Security & Risk Analysis
wordpress.org/plugins/disablerInstead of installing a million plugins to disable features you don't want, why not use just ONE plugin?
Is Disabler Safe to Use in 2026?
Generally Safe
Score 100/100Disabler has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.
The 'disabler' plugin v4.0.3 exhibits a generally positive security posture based on the static analysis. The absence of any identified dangerous functions, raw SQL queries, or unsanitized taint flows suggests a commitment to secure coding practices. The plugin also demonstrates good output escaping (92%) and implements nonce and capability checks, which are crucial for preventing unauthorized actions and data manipulation. The single external HTTP request is not inherently a vulnerability but warrants attention in a broader security review.
Key Concerns
- One known CVE historically
- One external HTTP request
Disabler Security Vulnerabilities
CVEs by Year
Severity Breakdown
1 total CVE
Disabler <= 3.0.3 - Cross-Site Request Forgery
Disabler Release Timeline
Disabler Code Analysis
Output Escaping
Disabler Attack Surface
WordPress Hooks 40
Scheduled Events 2
Maintenance & Trust
Disabler Maintenance & Trust
Maintenance Signals
Community Trust
Disabler Alternatives
WPControl – The Easiest Optimization Plugin for WordPress
wpcontrol
The easiest way to improve your website's security, performance, and user experience.
RationalCleanup
rationalcleanup
Clean up legacy WordPress bloat, improve security, and optimize performance with toggleable, opinionated defaults.
Turn Off REST API
turn-off-rest-api
Disable the WordPress REST API for logged out visitors and lock down your /wp-json endpoints, with a per route allow list so you stay in control.
AdminEase
adminease
Boosts your WordPress admin with tools for updates, security, performance, and user management - no coding required.
Authyo Passwordless Login
authyo-passwordless-login
WordPress login security with brute-force protection, IP manager, security logs, XML-RPC protection, REST API protection, and passwordless OTP login.
Disabler Developer Profile
10 plugins · 10K total installs
How We Detect Disabler
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/disabler/js/admin/tabs.jsHTML / DOM Fingerprints
nav-tab-wrappernav-tabhide-if-jstabbed-section-headingrole="tablist"role="tab"role="tabpanel"aria-labelledby