[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgS5S7x4n9ydxRByuxfutUuxy0A5JeIuhOMs3WRjoowU":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":18,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":37,"analysis":124,"fingerprints":195},"sbl-admin-bar","SBL Admin Bar","1.0","Steven Lienhard","https:\u002F\u002Fprofiles.wordpress.org\u002Flienhard\u002F","\u003Cp>Is the Admin Bar in the way while designing the site?  Enter control-shift-a while logged into the front end of the site to toggle the admin bar on\u002Foff.  You will see a temporary dialog confirming if the admin bar is on or off.  Refresh the page to see the result.\u003C\u002Fp>\n\u003Cp>You can enable or disable this feature by user role from the admin under Settings => SBL Admin Bar\u003C\u002Fp>\n","SBL Admin Bar allows you to dynamically turn the Admin Bar on\u002Foff using the hotkeys CONTROL-SHIFT-A. Can be enabled and disabled by user role.",10,883,100,3,"2020-12-12T20:34:00.000Z","5.6.17","4.3","",[20,21,22,23,24],"admin-bar","adminbar","hotkey","hotkeys","toolbar","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsbl-admin-bar.1.0.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"lienhard",1,30,84,"2026-04-04T00:37:04.586Z",[38,56,74,92,108],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":34,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":18,"tags":52,"homepage":18,"download_link":54,"security_score":55,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"hide-admin-bar-from-non-admins","Hide Admin Bar from Non-Admins","1.0.2","Andrew Lima","https:\u002F\u002Fprofiles.wordpress.org\u002Fandrewza\u002F","\u003Ch3>Install, activate, and you’re done.\u003C\u002Fh3>\n\u003Cp>This plugin hides the WordPress Toolbar (admin bar) for all visitors and users without the ‘administrator’ role. It’s a very simple plugin with no settings to configure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Use this plugin for sites with only one admin who needs access to the dashboard and the admin bar.\u003C\u002Fli>\n\u003Cli>This plugin is super lightweight, with just a few lines of code.\u003C\u002Fli>\n\u003Cli>If you need to show the toolbar for other user roles, use the filter \u003Ccode>habfna_show_admin_bar_roles\u003C\u002Fcode>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin is a tweak of the code by Yoast to hide the admin bar for non-admins only.\u003C\u002Fp>\n","Hides the WordPress toolbar (admin bar) for all non-admin users. Simple plugin with no settings to configure.",10000,237108,86,"2024-11-18T14:39:00.000Z","6.7.5","5.2",[20,21,53,24],"dashboard","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhide-admin-bar-from-non-admins.1.0.2.zip",92,{"slug":57,"name":58,"version":6,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":65,"num_ratings":66,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":18,"tags":70,"homepage":18,"download_link":73,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"disable-toolbar","Disable Toolbar","Michael Dance","https:\u002F\u002Fprofiles.wordpress.org\u002Fseventhsteel\u002F","\u003Cp>This humble plugin adds an option in Settings > General that controls who sees the WP Toolbar when viewing your site.\u003C\u002Fp>\n\u003Cp>You can turn the Toolbar on or off per user role.\u003C\u002Fp>\n\u003Cp>Note that this controls the public, front-end version of your site. When viewing the dashboard, the toolbar always appears.\u003C\u002Fp>\n\u003Cp>How is this different from other plugins that do similar things? It’s smaller, cleaner, and doesn’t add any unnecesary settings pages. It’s also smart enough to hide the Toolbar option on user profiles if that user is already restricted from seeing the toolbar.\u003C\u002Fp>\n","Control who sees the WP Toolbar when viewing your site.",2000,27311,98,17,"2017-11-09T15:51:00.000Z","4.9.29","3.1",[20,21,71,72,24],"hide-admin-bar","hide-toolbar","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisable-toolbar.1.0.zip",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":11,"downloaded":82,"rating":13,"num_ratings":33,"last_updated":83,"tested_up_to":84,"requires_at_least":85,"requires_php":18,"tags":86,"homepage":90,"download_link":91,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"admin-keys","Admin Keys","1.4.0","joesat","https:\u002F\u002Fprofiles.wordpress.org\u002Fjoesat\u002F","\u003Cp>Use the WordPress admin with keyboard shortcuts instead of relying on your mouse for everything. The plugin utilizes Mousetrap for handling key bindings. The shortcuts included cover basic WordPress admin navigation and actions.\u003C\u002Fp>\n","Admin Keys provide intuitive WordPress admin keyboard shortcuts for accessibility and efficiency",2351,"2015-05-18T02:47:00.000Z","4.2.39","3.9.3",[87,20,23,88,89],"admin","sidebar","toggle","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fadmin-keys\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadmin-keys.1.4.0.zip",{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":11,"downloaded":100,"rating":27,"num_ratings":27,"last_updated":18,"tested_up_to":101,"requires_at_least":18,"requires_php":18,"tags":102,"homepage":105,"download_link":106,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":107},"ibar","iBar","19.05","Linesh Jose","https:\u002F\u002Fprofiles.wordpress.org\u002Flineshjose\u002F","\u003Cp>This is a \u003Cstrong>Mac OSX Menubar\u003C\u002Fstrong> like \u003Cstrong>WordPres\u003C\u002Fstrong> adminbar\u002Ftoolbar theme, designed for Mac and WordPress lovers. Read more about \u003Ca href=\"https:\u002F\u002Flinesh.com\u002Fprojects\u002Fibar\u002F\" rel=\"nofollow ugc\">iBar\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support & more informations visit https:\u002F\u002Flinesh.com\u002Fforums\u002Fforum\u002Fplugins\u002Fibar\u002F.\u003C\u002Fp>\n","This is a Mac OSX Menubar like WordPres adminbar\u002Ftoolbar theme, designed for Mac and WordPress lovers.",2374,"5.2.24",[20,21,103,104,24],"mac-like-admin-bar","macos","https:\u002F\u002Flinesh.com\u002Fprojects\u002Fibar\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fibar.zip","2026-03-15T10:48:56.248Z",{"slug":109,"name":110,"version":6,"author":111,"author_profile":112,"description":113,"short_description":114,"active_installs":11,"downloaded":115,"rating":27,"num_ratings":27,"last_updated":116,"tested_up_to":101,"requires_at_least":117,"requires_php":118,"tags":119,"homepage":122,"download_link":123,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"limecall-widget","Limecall","LimeCall","https:\u002F\u002Fprofiles.wordpress.org\u002Fmohamedmamdouh1\u002F","\u003Cp>Limecall is a callback widget that enable your customers to speak to you instantly within few seconds and help you increase your web conversions.\u003Cbr \u002F>\nWhat can I do with Limecall ?\u003Cbr \u002F>\n– widget is the smartest way to generate more sales qualified leads and calls from your website visitors with targeted automation.\u003Cbr \u002F>\n– It will help you to connect instantly\u003Cbr \u002F>\n– Provides click2call funtionality (no need of phone number, connects from one browser to another)\u003Cbr \u002F>\n– You can schedule calls as per your convinenece\u003Cbr \u002F>\n– You can qulify your sales calls\u003Cbr \u002F>\n– Capture the prospects 24*7\u003Cbr \u002F>\n– Integrate with your favorite tools\u003C\u002Fp>\n","Limecall is a callback widget that enable your customers to speak to you instantly within few seconds and help you increase your web conversions.",960,"2020-04-01T13:20:00.000Z","4.6","5.2.4",[20,21,120,121,24],"bbpress","bbpress-2-0","https:\u002F\u002Flimecall.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flimecall-widget.zip",{"attackSurface":125,"codeSignals":168,"taintFlows":187,"riskAssessment":188,"analyzedAt":194},{"hooks":126,"ajaxHandlers":158,"restRoutes":165,"shortcodes":166,"cronEvents":167,"entryPointCount":33,"unprotectedCount":27},[127,133,137,141,145,149,155],{"type":128,"name":129,"callback":130,"file":131,"line":132},"action","wp","adminBarStuff","sbl-admin-bar.php",39,{"type":128,"name":134,"callback":135,"file":131,"line":136},"admin_menu","settings",41,{"type":128,"name":138,"callback":139,"file":131,"line":140},"personal_options","closure",43,{"type":128,"name":142,"callback":143,"file":131,"line":144},"wp_enqueue_scripts","enqueueScript",57,{"type":128,"name":146,"callback":147,"file":131,"line":148},"wp_footer","adminBarSpace",231,{"type":150,"name":151,"callback":152,"priority":153,"file":131,"line":154},"filter","show_admin_bar","__return_true",9999999,239,{"type":150,"name":151,"callback":156,"priority":153,"file":131,"line":157},"__return_false",243,[159],{"action":160,"nopriv":161,"callback":162,"hasNonce":163,"hasCapCheck":161,"file":131,"line":164},"sblAdminBar",false,"setAdminBar",true,37,[],[],[],{"dangerousFunctions":169,"sqlUsage":170,"outputEscaping":172,"fileOperations":27,"externalRequests":27,"nonceChecks":185,"capabilityChecks":27,"bundledLibraries":186},[],{"prepared":27,"raw":27,"locations":171},[],{"escaped":27,"rawEcho":173,"locations":174},6,[175,178,180,181,183,184],{"file":131,"line":176,"context":177},64,"raw output",{"file":131,"line":179,"context":177},168,{"file":131,"line":179,"context":177},{"file":131,"line":182,"context":177},169,{"file":131,"line":182,"context":177},{"file":131,"line":182,"context":177},2,[],[],{"summary":189,"deductions":190},"The sbl-admin-bar plugin v1.0 exhibits a generally good security posture in several key areas. It has a small attack surface with only one AJAX handler, and crucially, this handler is not reported as unprotected. The plugin also avoids dangerous functions, file operations, and external HTTP requests. All SQL queries are properly prepared, and nonces are implemented. This indicates a conscious effort by the developers to follow security best practices. However, a significant concern arises from the complete lack of output escaping. With 6 total outputs analyzed and 0% properly escaped, this presents a substantial risk of Cross-Site Scripting (XSS) vulnerabilities. This is particularly concerning as it is the only identified weakness in the static analysis, yet it impacts all output. The plugin's vulnerability history is clean, with no recorded CVEs. This suggests that either the plugin has been secure in the past, or it has not been extensively targeted or audited for vulnerabilities. While the absence of past vulnerabilities is positive, it doesn't mitigate the present risk of unescaped output. The overall security is strengthened by the lack of critical static analysis findings and a clean history, but severely weakened by the universal lack of output escaping. This makes the plugin vulnerable to XSS attacks, which can be exploited to compromise user sessions and data.",[191],{"reason":192,"points":193},"Output escaping missing on all outputs",8,"2026-03-17T00:28:24.215Z",{"wat":196,"direct":202},{"assetPaths":197,"generatorPatterns":199,"scriptPaths":200,"versionParams":201},[198],"\u002Fwp-content\u002Fplugins\u002Fsbl-admin-bar\u002Fjs\u002Fsbl-admin-bar.js",[],[198],[],{"cssClasses":203,"htmlComments":204,"htmlAttributes":206,"restEndpoints":209,"jsGlobals":210,"shortcodeOutput":212},[4],[205],"\u003C!-- Use CONTROL-SHIFT-A to toggle this value (SBL Admin Bar plugin) -->",[207,208],"id=\"active_role_","name=\"active_roles[",[],[211],"var abVarsJson =",[]]