[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2lbwZTR3ccB9RSYtl4sqHlImHFsJ7F87LzJY-qrNN3E":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":38,"analysis":135,"fingerprints":169},"no-login","No Login","1.1.3","Ozh","https:\u002F\u002Fprofiles.wordpress.org\u002Fozh\u002F","\u003Cp>Skip the login form: every visitor automatically auths as an admin. FOR ‘LOCALHOST’ TEST SITES only, obviously, like when designing a plugin or a theme and testing it across various browsers.\u003C\u002Fp>\n\u003Cp>For a hassle free integration, drop the plugin file into \u003Ccode>wp-content\u002Fmu-plugins\u003C\u002Fcode> (create the directory if needed) and it will be automatically activated.\u003C\u002Fp>\n\u003Cp>For live blogs, see \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Falways-remember-me\u002F\" rel=\"ugc\">Always Remember Me\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>On \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fozh\u002Fno-login\" rel=\"nofollow ugc\">Github\u003C\u002Fa>. I don’t read WordPress support forums.\u003C\u002Fp>\n","Skip the login form and always auth as admin. FOR TEST SITES.",10,5716,94,3,"2020-06-07T13:57:00.000Z","5.4.19","3.3","5.6",[20,21,22,23,24],"admin","auth","login","nologin","ozh","http:\u002F\u002Fplanetozh.com\u002Fblog\u002Fmy-projects\u002Fwordpress-plugin-no-login\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fno-login.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":24,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":35,"avg_patch_time_days":36,"trust_score":27,"computed_at":37},27,5470,87,30,"2026-04-04T16:22:55.566Z",[39,53,73,96,114],{"slug":40,"name":41,"version":42,"author":7,"author_profile":8,"description":43,"short_description":44,"active_installs":11,"downloaded":45,"rating":28,"num_ratings":28,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":51,"download_link":52,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"ozh-no-duplicate-comments","Ozh' No Duplicate Comments","1.0","\u003Cp>A new trend in spam is to duplicate legit comments from your readers to hopefully pass spam filters. Spammers post content that was previously approved on your site, but with their own name and URL. This plugin prevents this.\u003C\u002Fp>\n","Prevents spammers from duplicating legit comments but with their commenter name and URL",2414,"2010-09-18T12:33:00.000Z","9.9","1.5","",[20,21,22,23,24],"http:\u002F\u002Fplanetozh.com\u002Fblog\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fozh-no-duplicate-comments.zip",{"slug":54,"name":55,"version":56,"author":57,"author_profile":58,"description":59,"short_description":60,"active_installs":61,"downloaded":62,"rating":61,"num_ratings":63,"last_updated":64,"tested_up_to":65,"requires_at_least":66,"requires_php":49,"tags":67,"homepage":71,"download_link":72,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"simple-require-login","Simple Require Login","0.2","timmcdaniels","https:\u002F\u002Fprofiles.wordpress.org\u002Ftimmcdaniels\u002F","\u003Cp>WordPress plugin that adds a metabox to posts, pages, and custom post types where you can select if the content requires a login and what role is allowed to view the content. The native auth_redirect function is used to redirect users to the login page.\u003C\u002Fp>\n","Require login for content on a per page\u002Fpost\u002Fcustom post type basis. You can also select a specific role required to view the content.",100,3709,1,"2016-07-06T18:28:00.000Z","4.3.34","3.5",[20,68,22,69,70],"authentication","password","roles","http:\u002F\u002Fwww.weareconvoy.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-require-login.zip",{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":81,"downloaded":82,"rating":61,"num_ratings":83,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":87,"tags":88,"homepage":94,"download_link":95,"security_score":61,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"kolorweb-access-admin-notification","KolorWeb Access Admin Notification: extreme rescue for unauthorized admin logins","1.0.1","Vincenzo Casu","https:\u002F\u002Fprofiles.wordpress.org\u002Fvincent06\u002F","\u003Cp>\u003Cstrong>What sets this plugin apart?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>In a sea of admin login notification plugins, KolorWeb Access Admin Notification stands out for a few key reasons:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Simplicity\u003C\u002Fstrong>: This plugin is designed to be lightweight, clean, and simple to use in just 20kb (I challenge you to find something better).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Compatibility\u003C\u002Fstrong>: It is regularly updated to ensure compatibility with the latest WordPress versions.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Right checking\u003C\u002Fstrong>: Unlike many others, this plugin checks capabilities instead of roles, and this makes a really big big difference when an attacker modifies them by granting administrator privileges to roles that shouldn’t have them.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lightweight\u003C\u002Fstrong>: There are no options to manage and no information overload to store in the database.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Pratical & Quick\u003C\u002Fstrong>: One-click logout and password reset capability for unauthorized access directly from mail notification.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>I created this plugin because I couldn’t find any existing options that met my specific criteria. If you’re looking for a no-nonsense solution that gets the job done without any extra frills, this is the plugin for you.\u003C\u002Fp>\n\u003Cp>Specifically, if you have tried any of these plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsimple-login-notification\u002F\" rel=\"ugc\">Simple Login Notification\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Femail-notification-on-login\u002F\" rel=\"ugc\">Email Notification on Login\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Femail-notification-on-admin-login\" rel=\"ugc\">Email notification on admin login\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fkaya-login-notification\u002F\" rel=\"ugc\">Kaya Login Notification\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>I think it is time to abandon them and move on to a better solution like this one.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Protecting Your Privacy\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Your privacy is really really important, which is why KolorWeb Access Admin Notification is committed to safeguarding your data. This plugin does not collect or store any user information, set cookies, or connect to third-party sites. The only data it captures is related to admin-level logins, such as usernames, IP addresses, and user agents.\u003Cbr \u002F>\nKolorWeb Access Admin Notification: extreme rescue for unauthorized admin logins is created and maintained by Vincenzo Casu, a seasoned WordPress developer with 20 years of experience.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Updates\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If you don’t find any updates, it means that everything is working correctly with the latest WordPress release. But if you have an idea to improve this plugin, write to me.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Intro to the problem and my simple solution\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Every day I receive many emails of attempted access to the sites I manage. So I asked myself: “And if suddenly one attempt among the millions of those executed were to be successful, how could I know if not when it is already too late?”\u003C\u002Fp>\n\u003Cp>I thought the only way to know is to track admin account logins.\u003C\u002Fp>\n\u003Cp>If the login is successful, an email is sent containing the account data and the IP of origin. So as soon as you log in through the email and two links inside it, I can immediately disconnect the sessions of the compromised account, and also reset the password for that account, which will be notified by email with a second sending.\u003C\u002Fp>\n\u003Cp>In short, a solution that could save the life of your site because it allows you to become aware that there is some backdoor on the site that allows unauthorized access.\u003C\u002Fp>\n\u003Cp>This plugin sends an email notification for every access that is made by the website administrators. When a login is detected by a site administrator, the login time is stored and a notification is sent containing the details of the account that is logged in. If access is not authorized, through a link it is possible to disconnect the account from all devices, or disconnect the account from all devices that have logged in and at the same time reset the access password for that account. In this second case, a new notification is sent containing the new password.\u003C\u002Fp>\n","Extreme rescue for unauthorized admin logins.",70,2019,2,"2025-04-08T11:11:00.000Z","6.8.5","5.2","7.2",[89,90,91,92,93],"admin-login-notification","email-notify-on-admin-login","login-notification","track-admin-login","unauthorized-admin-logins","https:\u002F\u002Fgithub.com\u002Fvincenzocasu\u002Fkolorweb-access-admin-notification","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkolorweb-access-admin-notification.1.0.1.zip",{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":81,"downloaded":104,"rating":28,"num_ratings":28,"last_updated":105,"tested_up_to":106,"requires_at_least":107,"requires_php":49,"tags":108,"homepage":112,"download_link":113,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-auth","Wp Auth","1","ivansf","https:\u002F\u002Fprofiles.wordpress.org\u002Fivansf\u002F","\u003Cp>WP Auth is a set of tools to make your site new users friendly. It contains shortcodes and options that allows site owners to create registration and login pages that follow their design guidelines instead of having to skin the default WP login page.\u003C\u002Fp>\n\u003Cp>Features:\u003Cbr \u002F>\n– Login shortcode that renders a login form.\u003Cbr \u002F>\n– Registration shortcode that renders a registration page.\u003Cbr \u002F>\n– Recover form shortcode.\u003Cbr \u002F>\n– Login\u002FLogout Widget for quick user access.\u003Cbr \u002F>\n– Admin bar hiding options\u003Cbr \u002F>\n– Different button styles\u003Cbr \u002F>\n– Ability to hide \u002Fwp-admin and wp-login.php pages.\u003C\u002Fp>\n\u003Ch3>Arbitrary section 1\u003C\u002Fh3>\n","WP Auth is a set of tools to make your site new users friendly. It contains shortcodes and options that allows site owners to create registration and  …",11858,"2012-10-14T23:39:00.000Z","3.4.2","3.0",[21,109,22,110,111],"lockdown","shortcode","wpadmin","http:\u002F\u002Fwww.ivansotof.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-auth.1.0.zip",{"slug":115,"name":116,"version":42,"author":117,"author_profile":118,"description":119,"short_description":120,"active_installs":121,"downloaded":122,"rating":28,"num_ratings":28,"last_updated":123,"tested_up_to":124,"requires_at_least":107,"requires_php":49,"tags":125,"homepage":49,"download_link":134,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"gp","GP – GeePress","Louy Alakkad","https:\u002F\u002Fprofiles.wordpress.org\u002Flouyx\u002F","\u003Cp>GeePress, gives you all the tools you need to integrate your WordPress and Google+, including “Login with Google+” and “Comment via Google+”… Highly customizable and easy to use.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Allow your visitors to comment using their Google+ accounts\u003C\u002Fli>\n\u003Cli>Allow your blog users to sign in with their Google+ accounts. one click signin!\u003C\u002Fli>\n\u003Cli>Easily customizable by theme authors.\u003C\u002Fli>\n\u003C\u002Ful>\n","All the tools you need to integrate your WordPress and Google+.",40,1904,"2013-10-12T20:22:00.000Z","3.5.2",[20,126,127,128,129,130,131,22,132,133],"button","comment","comments","connect","google","google-plus","oauth","wpmu","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgp.1.0.zip",{"attackSurface":136,"codeSignals":153,"taintFlows":160,"riskAssessment":161,"analyzedAt":168},{"hooks":137,"ajaxHandlers":149,"restRoutes":150,"shortcodes":151,"cronEvents":152,"entryPointCount":28,"unprotectedCount":28},[138,144],{"type":139,"name":140,"callback":141,"file":142,"line":143},"action","admin_head","ozh_nologin_admin_css","nologin.php",19,{"type":139,"name":145,"callback":146,"priority":147,"file":142,"line":148},"wp_before_admin_bar_render","ozh_nologin_custom_toolbar",999,20,[],[],[],[],{"dangerousFunctions":154,"sqlUsage":155,"outputEscaping":157,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":159},[],{"prepared":28,"raw":28,"locations":156},[],{"escaped":28,"rawEcho":28,"locations":158},[],[],[],{"summary":162,"deductions":163},"Based on the provided static analysis and vulnerability history, the \"no-login\" v1.1.3 plugin appears to have a very strong security posture. The absence of any identified entry points such as AJAX handlers, REST API routes, shortcodes, or cron events, means the plugin has no external attack surface that could be directly exploited. Furthermore, the code analysis reveals no dangerous functions, all SQL queries are properly prepared, and output is consistently escaped, indicating robust internal coding practices. There are no reported vulnerabilities, including CVEs, which further reinforces the plugin's current security. \n\nHowever, the complete lack of any security checks (nonce checks and capability checks) across all potential, albeit non-existent, entry points is a notable omission. While there is no current attack surface to exploit, if future versions introduce new functionalities, the absence of these fundamental security checks could become a significant risk. The lack of any taint flows analyzed is also an indicator that the analysis might have been limited, or the code is indeed very simple. \n\nIn conclusion, \"no-login\" v1.1.3 exhibits excellent internal code quality and a clean vulnerability history. Its minimal attack surface is a major strength. The primary weakness lies in the absence of any security mechanisms, which, while not currently exploitable, represents a potential future risk if the plugin's functionality expands.",[164,166],{"reason":165,"points":11},"No Nonce checks detected",{"reason":167,"points":11},"No Capability checks detected","2026-03-17T00:39:10.136Z",{"wat":170,"direct":175},{"assetPaths":171,"generatorPatterns":172,"scriptPaths":173,"versionParams":174},[],[],[],[],{"cssClasses":176,"htmlComments":178,"htmlAttributes":179,"restEndpoints":180,"jsGlobals":181,"shortcodeOutput":182},[177],"ab-item",[],[],[],[],[]]