Remove meta boxes per user role Security & Risk Analysis

wordpress.org/plugins/remove-meta-boxes-per-user-role

Set up permissions for categories and taxonomies to admin users whose role is not "administrator"

10 active installs v1.01 PHP + WP 3.0.1+ Updated Nov 18, 2014
adminmeta-boxesmeta_boxnew-psotremove_meta_box
63
C · Use Caution
CVEs total1
Unpatched1
Last CVEJun 1, 2026
Safety Verdict

Is Remove meta boxes per user role Safe to Use in 2026?

Use With Caution

Score 63/100

Remove meta boxes per user role has 1 unpatched vulnerability. Evaluate alternatives or apply available mitigations.

1 known CVE 1 unpatched Last CVE: Jun 1, 2026Updated 11yr ago
Risk Assessment

The plugin 'remove-meta-boxes-per-user-role' v1.01 demonstrates a strong security posture based on the provided static analysis. There are no identified entry points such as AJAX handlers, REST API routes, shortcodes, or cron events that are exposed to attack. Furthermore, the code shows adherence to secure coding practices, with no dangerous functions, all SQL queries utilizing prepared statements, and all output being properly escaped. The absence of file operations and external HTTP requests further reduces the potential attack surface. The plugin's vulnerability history is also clean, with no recorded CVEs, indicating a lack of past security issues.

Vulnerabilities
1 published

Remove meta boxes per user role Security Vulnerabilities

CVEs by Year

1 CVE in 2026 · unpatched
2026
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2026-8422medium · 4.3Cross-Site Request Forgery (CSRF)

Remove meta boxes per user role <= 1.01 - Cross-Site Request Forgery to Settings Update

Jun 1, 2026Unpatched
Version History

Remove meta boxes per user role Release Timeline

No version history available.
Code Analysis
Analyzed Mar 17, 2026

Remove meta boxes per user role Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Remove meta boxes per user role Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionadmin_menuremove-meta-boxes-per-role.php:45
actionadmin_headremove-meta-boxes-per-role.php:79
Maintenance & Trust

Remove meta boxes per user role Maintenance & Trust

Maintenance Signals

WordPress version tested4.0.38
Last updatedNov 18, 2014
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Remove meta boxes per user role Developer Profile

Mathieu Thollet

4 plugins · 30 total installs

80
trust score
Avg Security Score
80/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Remove meta boxes per user role

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/remove-meta-boxes-per-user-role/js/settings.js
Script Paths
/wp-content/plugins/remove-meta-boxes-per-user-role/js/settings.js

HTML / DOM Fingerprints

CSS Classes
rmbpur_admin_page
Data Attributes
id="remove_meta_boxes_per_user_role"name="meta_box_to_remove_administrator[]"name="meta_box_to_remove_editor[]"name="meta_box_to_remove_author[]"name="meta_box_to_remove_contributor[]"name="meta_box_to_remove_subscriber[]"
JS Globals
rmbpur_check_all_labelrmbpur_uncheck_all_label
FAQ

Frequently Asked Questions about Remove meta boxes per user role