Plugin Load Filter Security & Risk Analysis

wordpress.org/plugins/plugin-load-filter

Dynamically activate the selected plugins for each page. Response will be faster by filtering plugins.

8K active installs v4.3.1 PHP 8.1+ WP 6.0+ Updated Feb 19, 2026
disable-pluginsdynamic-deactivate-pluginslocale-switchingperformance
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Plugin Load Filter Safe to Use in 2026?

Generally Safe

Score 100/100

Plugin Load Filter has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The plugin 'plugin-load-filter' v4.3.1 exhibits a generally good security posture, demonstrating several positive security practices. The presence of nonce and capability checks on all identified entry points is a significant strength, indicating an effort to validate user actions and permissions. Furthermore, the use of prepared statements for a high percentage of SQL queries (83%) is commendable and mitigates common SQL injection risks. The lack of any recorded vulnerabilities, critical taint flows, or dangerous functions further contributes to this positive assessment.

Key Concerns

  • Low percentage of properly escaped output
  • Significant number of file operations
Vulnerabilities
None known

Plugin Load Filter Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Plugin Load Filter Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
10 prepared
Unescaped Output
36
9 escaped
Nonce Checks
5
Capability Checks
5
File Operations
4
External Requests
0
Bundled Libraries
0

SQL Query Safety

83% prepared12 total queries

Output Escaping

20% escaped45 total outputs
Data Flows
All sanitized

Data Flow Analysis

1 flows
<plugin-load-filter> (plugin-load-filter.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Plugin Load Filter Attack Surface

Entry Points1
Unprotected0

AJAX Handlers 1

authwp_ajax_plugin_load_filterplugin-load-filter.php:201
WordPress Hooks 35
filterpre_site_option_active_sitewide_pluginsmu-plugins\plf-filter.php:211
actionupdate_site_option_active_sitewide_pluginsmu-plugins\plf-filter.php:212
filterpre_option_active_pluginsmu-plugins\plf-filter.php:214
filterpre_option_jetpack_active_modulesmu-plugins\plf-filter.php:215
filterpre_option_celtispack_active_modulesmu-plugins\plf-filter.php:216
filterplf_singler_custom_url_to_postidmu-plugins\plf-filter.php:218
actionupdate_option_active_pluginsmu-plugins\plf-filter.php:220
actionupdate_option_jetpack_active_modulesmu-plugins\plf-filter.php:221
actionupdate_option_celtispack_active_modulesmu-plugins\plf-filter.php:222
actionswitch_thememu-plugins\plf-filter.php:223
actionplugins_loadedmu-plugins\plf-filter.php:225
actionadmin_initmu-plugins\plf-filter.php:226
actionadmin_bar_menumu-plugins\plf-filter.php:229
filterlocalemu-plugins\plf-filter.php:233
filterdetermine_localemu-plugins\plf-filter.php:234
actionparse_requestmu-plugins\plf-filter.php:1162
filterdoing_it_wrong_trigger_errormu-plugins\plf-filter.php:1163
filtermap_meta_capmu-plugins\plf-filter.php:1266
actioninitplugin-load-filter.php:185
actionwp_headplugin-load-filter.php:193
actionplugins_loadedplugin-load-filter.php:197
actionadmin_initplugin-load-filter.php:198
actionadd_meta_boxesplugin-load-filter.php:199
filterpre_site_option_active_sitewide_pluginsplugin-load-filter.php:223
filterpre_option_active_pluginsplugin-load-filter.php:224
filterpre_option_jetpack_active_modulesplugin-load-filter.php:242
filterpre_option_celtispack_active_modulesplugin-load-filter.php:257
actionadmin_menuplugin-load-filter.php:264
actionadmin_headplugin-load-filter.php:288
actionadmin_headplugin-load-filter.php:289
actionadmin_footerplugin-load-filter.php:290
actionadmin_noticesplugin-load-filter.php:291
actionadmin_footerplugin-load-filter.php:949
filterlocaleplugin-load-filter.php:1033
filterlocaleplugin-load-filter.php:1156
Maintenance & Trust

Plugin Load Filter Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 19, 2026
PHP min version8.1
Downloads181K

Community Trust

Rating96/100
Number of ratings52
Active installs8K
Developer Profile

Plugin Load Filter Developer Profile

enomoto celtislab

12 plugins · 9K total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Plugin Load Filter

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/plugin-load-filter/js/plf-admin.js/wp-content/plugins/plugin-load-filter/js/plf-public.js/wp-content/plugins/plugin-load-filter/css/plf-admin.css/wp-content/plugins/plugin-load-filter/css/plf-public.css
Script Paths
/wp-content/plugins/plugin-load-filter/js/plf-admin.js/wp-content/plugins/plugin-load-filter/js/plf-public.js
Version Parameters
plugin-load-filter/js/plf-admin.js?ver=plugin-load-filter/js/plf-public.js?ver=plugin-load-filter/css/plf-admin.css?ver=plugin-load-filter/css/plf-public.css?ver=

HTML / DOM Fingerprints

CSS Classes
plf_setting_wrap
HTML Comments
Plugin Load Filter Settingplf_custom_css
Data Attributes
data-plf-iddata-plf-active-plugin-list
JS Globals
plf_admin_obj
FAQ

Frequently Asked Questions about Plugin Load Filter