WP-Safety

Secure Admin Access Security & Risk Analysis

wordpress.org/plugins/secure-admin-access

Secure Your Website Admin And Dashboard Access & Modify Login Page Design & Login Attempts for login protection

10 active installs v1.0 PHP + WP 3.3+ Updated Oct 9, 2017
limit-login-attemptslogin-attemptlogin-attemptslogin-securitysecure-admin-access
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Secure Admin Access Safe to Use in 2026?

Generally Safe

Score 85/100

Secure Admin Access has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The "secure-admin-access" plugin version 1.0 exhibits a generally good security posture based on the provided static analysis. The absence of identifiable attack surface entry points like AJAX handlers, REST API routes, shortcodes, and cron events is a significant positive. Furthermore, the lack of dangerous functions, file operations, and external HTTP requests are all indicators of well-contained and potentially safer code. The vulnerability history shows no known CVEs, suggesting a stable and unexploited past, which is highly reassuring for users.

Key Concerns

  • SQL queries not using prepared statements
  • Output escaping not properly implemented
  • Taint flows with unsanitized paths
  • Missing nonce checks
  • Missing capability checks
Vulnerabilities
None known

Secure Admin Access Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Secure Admin Access Release Timeline

No version history available.
Code Analysis
Analyzed Mar 16, 2026

Secure Admin Access Code Analysis

Dangerous Functions
0
Raw SQL Queries
6
1 prepared
Unescaped Output
7
18 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

14% prepared7 total queries

Output Escaping

72% escaped25 total outputs
Data Flows · Security
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
init_saa_admin_option_page (secure-admin-access.php:65)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Secure Admin Access Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 19
actionlogin_enqueue_scriptssaa-class.php:28
actioninitsaa-class.php:29
actioninitsaa-class.php:30
actionlogin_headsaa-class.php:31
actionlogin_footersaa-class.php:32
actionlogin_enqueue_scriptssaa-class.php:33
actionadmin_initsaa-class.php:37
actionadmin_initsaa-class.php:38
actionadmin_menusecure-admin-access.php:17
actionadmin_enqueue_scriptssecure-admin-access.php:32
actionadmin_initsecure-admin-access.php:36
actionadmin_footersecure-admin-access.php:233
actionadmin_noticessecure-admin-access.php:348
actionadmin_initsecure-admin-access.php:454
actionplugins_loadedsecure-admin-access.php:472
actionwp_login_failedsecure-admin-access.php:477
actionlogin_errorssecure-admin-access.php:478
filterauthenticatesecure-admin-access.php:479
actionadmin_initsecure-admin-access.php:480
Maintenance & Trust

Secure Admin Access Maintenance & Trust

Maintenance Signals

WordPress version tested4.7.33
Last updatedOct 9, 2017
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Alternatives

Secure Admin Access Alternatives

Melapress Login Security

Melapress Login Security

melapress-login-security

A
91

Enforce WordPress login and password security policies to protect user accounts and prevent unauthorized logins.

2K 4 CVEs
Jeba Limit Login Attempts

Jeba Limit Login Attempts

jeba-limit-login-attempts

A
85

This is Jeba Limit Login Attempts wordpress plugin. Automatically lock the system for 30 minutes if a user attempts to login and fails after 3 tries.

100 No CVEs
Admin Safety Guard — Login Security & 2FA

Admin Safety Guard — Login Security & 2FA

admin-safety-guard

B
78

Admin Safety Guard secures WordPress: limit logins, 2FA, reCAPTCHA, IP block, disable XML-RPC, activity logs, custom URLs and branding.

20 1 unpatched
Simple Login Guard – Monitor & Block Attempts

Simple Login Guard – Monitor & Block Attempts

simple-login-guard

A
100

Monitor failed login attempts and automatically block IPs after multiple failures. Lightweight and easy to use.

0 No CVEs
Titan Anti-spam & Security

Titan Anti-spam & Security

anti-spam

A
98

Block spam comments, defend against login attempts, and strengthen site security with anti-spam, brute-force protection, and two-factor authentication …

60K 3 CVEs
Developer Profile

Secure Admin Access Developer Profile

maheshkathiriya

2 plugins · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Secure Admin Access

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/secure-admin-access/assets/css/admin-style.css/wp-content/plugins/secure-admin-access/assets/js/admin-script.js/wp-content/plugins/secure-admin-access/assets/js/media-uploader.js
Script Paths
/wp-content/plugins/secure-admin-access/assets/js/admin-script.js/wp-content/plugins/secure-admin-access/assets/js/media-uploader.js

HTML / DOM Fingerprints

CSS Classes
saa-page-designsaa-headingsaa-titlesaa-tab-menusaa-tab-linkssaa-settingsaa-tabsaa-settings-form-table
HTML Comments
Start Options Form action="options.php"
Data Attributes
id="saa-plugin-form-admin"id="check_permalink"id="saa-tab-menu"id="saa-general"class="saa-tab-links active"id="saa-admin-login-attempt"+16 more
FAQ

Frequently Asked Questions about Secure Admin Access