Remove Gutenberg Security & Risk Analysis

wordpress.org/plugins/restore-classic-editor

Remove Gutenberg Editor and get back to old version of editor. This provides Original Classic Editor and more.

400 active installs v2.2.2 PHP 7.4+ WP 4.9+ Updated Jul 2, 2024
classic-editordisable-gutenbergeditorgutenberg-managerremove-gutenberg
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Remove Gutenberg Safe to Use in 2026?

Generally Safe

Score 92/100

Remove Gutenberg has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The 'restore-classic-editor' plugin v2.2.2 exhibits a strong security posture based on the provided static analysis and vulnerability history. The absence of any identified attack vectors such as AJAX handlers, REST API routes, shortcodes, or cron events significantly reduces the potential for external exploitation. Furthermore, the code analysis shows no dangerous functions, raw SQL queries, file operations, or external HTTP requests, all of which are positive indicators of secure coding practices. The plugin also demonstrates good practice by using prepared statements for its SQL queries. The lack of any recorded vulnerabilities or CVEs in its history further solidifies its current security standing.

While the plugin appears to be very secure, a key area of concern arises from the output escaping. With 50% of outputs not being properly escaped, there is a potential risk of Cross-Site Scripting (XSS) vulnerabilities if user-supplied data is directly outputted without sanitization. Additionally, the complete absence of nonce and capability checks, while perhaps understandable given the limited attack surface, means that any entry points, however few or theoretically protected, would lack fundamental WordPress security mechanisms. This could become a concern if the plugin's functionality were to expand or if previously unknown entry points were discovered.

Key Concerns

  • Half of outputs are not properly escaped
  • No nonce checks implemented
  • No capability checks implemented
Vulnerabilities
None known

Remove Gutenberg Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Remove Gutenberg Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
2 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

50% escaped4 total outputs
Attack Surface

Remove Gutenberg Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 8
filteruse_block_editor_for_postrm-gutenberg.php:26
filteruse_block_editor_for_post_typerm-gutenberg.php:29
actionadmin_initrm-gutenberg.php:39
actionadmin_noticesrm-gutenberg.php:101
filteruse_block_editor_for_posttrunk\rm-gutenberg.php:26
filteruse_block_editor_for_post_typetrunk\rm-gutenberg.php:29
actionadmin_inittrunk\rm-gutenberg.php:39
actionadmin_noticestrunk\rm-gutenberg.php:101
Maintenance & Trust

Remove Gutenberg Maintenance & Trust

Maintenance Signals

WordPress version tested6.5.8
Last updatedJul 2, 2024
PHP min version7.4
Downloads15K

Community Trust

Rating60/100
Number of ratings2
Active installs400
Developer Profile

Remove Gutenberg Developer Profile

Ravi A. Vadhel

1 plugin · 400 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Remove Gutenberg

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

CSS Classes
removeguternberg-actions
HTML Comments
<!-- add_rm_notice( ( __('<h4>Hello,</h4> <p>my name is <strong>Ravi Vadhel</strong>. I am the developer of <strong>Remove Gutenberg</strong> plugin.<br>If you like this plugin, please write a few words about it at wordpress.org. Your opinion will help other people.</p> <p>Thank you!</p> <p class="removeguternberg-actions"> <a class="button button-primary" target="_blank" href="https://wordpress.org/support/plugin/restore-classic-editor/reviews/?rate=5&amp;filter=5#new-post">Rate plugin</a> </p>'), "success", true ); -->
Data Attributes
id="guternfield"
FAQ

Frequently Asked Questions about Remove Gutenberg