[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSE99LAuVwiCjB7W5K21VzpHohUhiKlUzsisku_kMJvo":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":18,"download_link":19,"security_score":20,"vuln_count":11,"unpatched_count":11,"last_vuln_date":21,"fetched_at":22,"vulnerabilities":23,"developer":24,"crawl_stats":21,"alternatives":32,"analysis":33,"fingerprints":140},"showhide-updates-exclusive","Show\u002FHide Updates Exclusive","1.0.0","PRESSMAN","https:\u002F\u002Fprofiles.wordpress.org\u002Fpressmaninc\u002F","\u003Cp>This plugin hides all update notifications for WordPress core, plugin and theme updates in WordPress admin for all users except users whom administrators select as updater.\u003Cbr \u002F>\nThe administrator can select whether to show or hide on the profile screen of each user.\u003Cbr \u002F>\n It’s useful for developers and agencies who take care of updates and maintenance of their clients sites and wants to hide the notices for other users.\u003C\u002Fp>\n\u003Cp>way to use\u003C\u002Fp>\n\u003Col>\n\u003Cli>Check ‘Show Updates’ on edit user page which you want to show updates.\u003C\u002Fli>\n\u003C\u002Fol>\n","This plugin hides all update notifications for Wordpress core, plugin and theme updates in Wordpress admin for all users except users whom administrat &hellip;",0,919,"2018-12-27T04:49:00.000Z","5.0.25","4.9.8","7.0.0",[],"","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshowhide-updates-exclusive.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":25,"display_name":7,"profile_url":8,"plugin_count":26,"total_installs":27,"avg_security_score":28,"avg_patch_time_days":29,"trust_score":30,"computed_at":31},"pressmaninc",20,100,90,30,87,"2026-04-04T22:49:03.431Z",[],{"attackSurface":34,"codeSignals":127,"taintFlows":135,"riskAssessment":136,"analyzedAt":139},{"hooks":35,"ajaxHandlers":123,"restRoutes":124,"shortcodes":125,"cronEvents":126,"entryPointCount":11,"unprotectedCount":11},[36,42,47,50,54,57,60,64,67,70,74,78,82,85,88,91,94,97,99,102,105,108,111,114,118],{"type":37,"name":38,"callback":39,"file":40,"line":41},"filter","init","is_update_user","show-hide-updates-exclusive.php",46,{"type":43,"name":44,"callback":45,"file":40,"line":46},"action","show_user_profile","updater_field",47,{"type":43,"name":48,"callback":45,"file":40,"line":49},"edit_user_profile",48,{"type":43,"name":51,"callback":52,"file":40,"line":53},"personal_options_update","save_custom_user_profile_fields",49,{"type":43,"name":55,"callback":52,"file":40,"line":56},"edit_user_profile_update",50,{"type":43,"name":58,"callback":58,"file":40,"line":59},"admin_init",68,{"type":37,"name":61,"callback":62,"file":40,"line":63},"pre_site_transient_update_themes","last_checked_atm",73,{"type":37,"name":65,"callback":62,"file":40,"line":66},"pre_site_transient_update_plugins",78,{"type":37,"name":68,"callback":62,"file":40,"line":69},"pre_site_transient_update_core",83,{"type":43,"name":71,"callback":72,"file":40,"line":73},"schedule_event","filter_cron_events",88,{"type":37,"name":75,"callback":76,"file":40,"line":77},"auto_update_translation","__return_false",93,{"type":37,"name":79,"callback":80,"file":40,"line":81},"automatic_updater_disabled","__return_true",94,{"type":37,"name":83,"callback":76,"file":40,"line":84},"allow_minor_auto_core_updates",95,{"type":37,"name":86,"callback":76,"file":40,"line":87},"allow_major_auto_core_updates",96,{"type":37,"name":89,"callback":76,"file":40,"line":90},"allow_dev_auto_core_updates",97,{"type":37,"name":92,"callback":76,"file":40,"line":93},"auto_update_core",98,{"type":37,"name":95,"callback":76,"file":40,"line":96},"wp_auto_update_core",99,{"type":37,"name":98,"callback":76,"file":40,"line":27},"auto_core_update_send_email",{"type":37,"name":100,"callback":76,"file":40,"line":101},"send_core_update_notification_email",101,{"type":37,"name":103,"callback":76,"file":40,"line":104},"auto_update_plugin",102,{"type":37,"name":106,"callback":76,"file":40,"line":107},"auto_update_theme",103,{"type":37,"name":109,"callback":76,"file":40,"line":110},"automatic_updates_send_debug_email",104,{"type":37,"name":112,"callback":80,"file":40,"line":113},"automatic_updates_is_vcs_checkout",105,{"type":37,"name":115,"callback":76,"priority":116,"file":40,"line":117},"automatic_updates_send_debug_email ",1,107,{"type":37,"name":119,"callback":120,"priority":121,"file":40,"line":122},"pre_http_request","block_request",10,114,[],[],[],[],{"dangerousFunctions":128,"sqlUsage":129,"outputEscaping":131,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":133,"bundledLibraries":134},[],{"prepared":11,"raw":11,"locations":130},[],{"escaped":11,"rawEcho":11,"locations":132},[],2,[],[],{"summary":137,"deductions":138},"Based on the provided static analysis, the \"showhide-updates-exclusive\" v1.0.0 plugin exhibits a strong security posture. The absence of any identified entry points, including AJAX handlers, REST API routes, shortcodes, and cron events, significantly minimizes its attack surface. Furthermore, the code analysis indicates a lack of dangerous functions, no file operations, and no external HTTP requests, all of which are positive indicators. The fact that 100% of SQL queries use prepared statements and all output is properly escaped demonstrates good development practices in preventing common web vulnerabilities.\n\nWhile the code analysis reveals no critical or high-severity issues in taint analysis and the plugin has no recorded vulnerability history, it's important to note the absence of nonce checks and the presence of only two capability checks. In scenarios where functionality might evolve or be extended in future versions, these could become points of concern if not carefully managed. However, with the current version and the disclosed analysis, the plugin appears to be very secure due to its minimal attack surface and adherence to secure coding principles.\n\nIn conclusion, \"showhide-updates-exclusive\" v1.0.0 presents a very low security risk. Its strengths lie in its extremely limited attack surface and the developer's apparent commitment to secure coding practices like prepared statements and output escaping. The main areas for potential future monitoring, although not current critical flaws, would be related to the limited number of capability checks and the complete absence of nonce checks, which could be important for future extensibility.",[],"2026-03-17T07:27:59.241Z",{"wat":141,"direct":146},{"assetPaths":142,"generatorPatterns":143,"scriptPaths":144,"versionParams":145},[],[],[],[],{"cssClasses":147,"htmlComments":148,"htmlAttributes":151,"restEndpoints":153,"jsGlobals":154,"shortcodeOutput":155},[],[149,150],"\u003C!-- Show Update -->","\u003C!-- Show -->",[152],"data-updater",[],[],[]]