[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXlJcex7ge9CyYjL1zcJEvvjHV9D7BQfdZYK4ZmRUbD4":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":36,"analysis":137,"fingerprints":251},"simple-onoff-switch","Simple On\u002FOff Switch","1.2","mattbeekler","https:\u002F\u002Fprofiles.wordpress.org\u002Fmattbeekler\u002F","\u003Cp>Adds a dashboard widget with a on\u002Foff switch that returns “on” or “off” value with a shortcode. Shortcode is [simpleswitch]\u003C\u002Fp>\n","Adds a dashboard widget with a on\u002Foff switch that returns \"on\" or \"off\" value with a shortcode. Shortcode is [simpleswitch]",10,2519,100,1,"2013-04-16T16:40:00.000Z","3.5.2","3.5","",[20,21,22,23,24],"admin","dashboard","select","switch","widgets","http:\u002F\u002Fmattbuechler.com\u002Fportfolio\u002Fwordpress-plugins\u002Fsimple-onoff-switch\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-onoff-switch.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},30,84,"2026-04-04T21:24:35.006Z",[37,59,78,98,118],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":52,"tags":53,"homepage":56,"download_link":57,"security_score":58,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-widget-disable","Widget Disable","3.0.1","required","https:\u002F\u002Fprofiles.wordpress.org\u002Fwearerequired\u002F","\u003Cp>This simple plugin allows you to disable any sidebar and dashboard widget for the current WordPress site you are on. It provides a simple user interface available to users with \u003Ccode>edit_theme_options\u003C\u002Fcode> capabilities (usually Administrator role) available under Appearance -> Disable Widgets.\u003Cbr \u002F>\nAfter saving the settings, the sidebar and dashboard widgets are removed from and the user can’t see those widgets anymore.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Developer? Get to know the hooks\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Have a look at the filters we provide:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>wp_widget_disable_default_sidebar_widgets\u003C\u002Fcode> – Allows you to exclude certain sidebar widgets from being disabled.\u003C\u002Fli>\n\u003Cli>\u003Ccode>wp_widget_disable_default_dashboard_widgets\u003C\u002Fcode> – Allows you to exclude certain dashboard widgets from being disabled.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Contributions\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If you would like to contribute to this plugin, report an issue or anything like that, please note that we develop this plugin on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwearerequired\u002FWP-Widget-Disable\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Developed by \u003Ca href=\"https:\u002F\u002Frequired.com\u002F\" title=\"Team of experienced web professionals from Switzerland & Germany\" rel=\"nofollow ugc\">required\u003C\u002Fa>\u003C\u002Fp>\n","Disable sidebar and dashboard widgets with an easy to use interface.",10000,185111,96,24,"2024-11-18T13:40:00.000Z","6.7.5","6.0","7.4",[20,21,54,55,24],"dashboard-widgets","sidebar-widgets","https:\u002F\u002Frequired.com\u002Fservices\u002Fwordpress-plugins\u002Fwp-widget-disable\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-widget-disable.3.0.1.zip",92,{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":47,"num_ratings":69,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":18,"tags":73,"homepage":76,"download_link":77,"security_score":58,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"dashboard-commander","Dashboard Commander","1.0.3","Josh Hartman","https:\u002F\u002Fprofiles.wordpress.org\u002Fjoshhartman\u002F","\u003Cp>Command your admin dashboard. Manage built-in widgets (Right Now, Recent Comments, etc.) and dynamically registered widgets (Google Analytics Summary, WP E-Commerce Dashboard, etc.). Hide widgets depending upon user capabilities.\u003C\u002Fp>\n\u003Cp>This plugin is based upon Dave Kinkead’s Dashboard Heaven plugin and extends it to support dynamically registered widgets, such as dashboard widgets that are added by a plugin.\u003C\u002Fp>\n\u003Cp>After installation access to all dashboard widgets is removed, then you can use the options at Settings > Dashboard Commander to configure the minimum access level for each widget.\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F7YBOm5ov3vs?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n","Command your admin dashboard. Manage built-in widgets and dynamically registered widgets. Hide widgets depending upon user capabilities.",900,34553,8,"2024-04-05T06:01:00.000Z","6.5.8","2.9.2",[20,74,21,75,24],"command","manage","http:\u002F\u002Fwww.warpconduit.net\u002Fwordpress-plugins\u002Fdashboard-commander\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdashboard-commander.1.0.3.zip",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":13,"num_ratings":69,"last_updated":88,"tested_up_to":89,"requires_at_least":90,"requires_php":18,"tags":91,"homepage":94,"download_link":95,"security_score":96,"vuln_count":14,"unpatched_count":14,"last_vuln_date":97,"fetched_at":30},"dashboard-widget-sidebar","Dashboard Widget Sidebar","1.2.3","Morten Dalgaard Johansen","https:\u002F\u002Fprofiles.wordpress.org\u002Fiosoftgame\u002F","\u003Cp>Enable regulare widgets to be used as Dashboard Widgets in admin.\u003C\u002Fp>\n\u003Cp>This plugin adds a new widget area to the Appearance -> Widgets section in WordPress admin, from where you can add regulare widgets to the WordPress admin dashboard.\u003C\u002Fp>\n\u003Ch3>Donations\u003C\u002Fh3>\n","Enable regulare widgets to be used as Dashboard Widgets in admin.",400,12968,"2015-04-21T07:32:00.000Z","4.2.39","3.3",[20,21,92,93,24],"dashboard-widget","widget","http:\u002F\u002Fwww.iosoftgame.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdashboard-widget-sidebar.1.2.3.zip",63,"2025-06-27 00:00:00",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":13,"num_ratings":14,"last_updated":108,"tested_up_to":109,"requires_at_least":90,"requires_php":18,"tags":110,"homepage":116,"download_link":117,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"abd-dashboard-widget-manager","ABD Dashboard Widget Manager","1.1","abdwebdesign","https:\u002F\u002Fprofiles.wordpress.org\u002Fabdwebdesign\u002F","\u003Cp>Take control of your admin dashboard!\u003C\u002Fp>\n\u003Cp>This plugin gives you an easy way to customize your WordPress administrator dashboard.\u003C\u002Fp>\n\u003Col>\n\u003Cli>Select which user roles you’d like to customize.\u003C\u002Fli>\n\u003Cli>select which admin dashboard widgets you’d like to have displayed. \u003C\u002Fli>\n\u003Cli>You also get the option to show a new ‘custom widget’ which you can then add your desired content. \u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>This custom widget is a great way to add documentation for your clients or leave notes for yourself right there on the admin dashboard when you or your users logs in. We use it for almost all of our clients so that they have documentation they need to manage their WordPress sites.\u003C\u002Fp>\n","Customize your WordPress administrator dashboard. You can choose which admin widgets to display, the user roles, and add your own dashboard content.",300,11868,"2014-08-10T23:21:00.000Z","3.9.40",[111,112,113,114,115],"admin-dashboard","admin-widgets","custom-dashboard","custom-widget","widget-manager","http:\u002F\u002Faaronbday.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fabd-dashboard-widget-manager.zip",{"slug":119,"name":120,"version":121,"author":122,"author_profile":123,"description":124,"short_description":125,"active_installs":126,"downloaded":127,"rating":128,"num_ratings":129,"last_updated":130,"tested_up_to":131,"requires_at_least":132,"requires_php":18,"tags":133,"homepage":135,"download_link":136,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-remove-dashboard-extra-widgets","Remove WP Dashboard Extra Widgets","2.1.0","Ahmad Awais","https:\u002F\u002Fprofiles.wordpress.org\u002Fmrahmadawais\u002F","\u003Cp>Removes the WordPress dashboard widgets that are extra and useless for some users i.e. plugins, wp blog news etc\u003C\u002Fp>\n","Removes the WordPress dashboard widgets that are extra and useless for some users i.e. plugins, wp blog news etc",60,5511,94,3,"2020-03-07T21:28:00.000Z","5.4.0","3.0",[20,21,134,24],"remove","https:\u002F\u002FAhmadAwais.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-remove-dashboard-extra-widgets.2.1.0.zip",{"attackSurface":138,"codeSignals":152,"taintFlows":172,"riskAssessment":236,"analyzedAt":250},{"hooks":139,"ajaxHandlers":145,"restRoutes":146,"shortcodes":147,"cronEvents":151,"entryPointCount":14,"unprotectedCount":28},[140],{"type":141,"name":142,"callback":143,"file":144,"line":13},"action","wp_dashboard_setup","simpleonoffswitch_dashboard_widgets","simple-on-off-switch.php",[],[],[148],{"tag":149,"callback":150,"file":144,"line":58},"simpleswitch","simpleswitch_shortcode",[],{"dangerousFunctions":153,"sqlUsage":154,"outputEscaping":156,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":171},[],{"prepared":28,"raw":28,"locations":155},[],{"escaped":28,"rawEcho":157,"locations":158},6,[159,162,164,166,168,170],{"file":144,"line":160,"context":161},35,"raw output",{"file":144,"line":163,"context":161},47,{"file":144,"line":165,"context":161},48,{"file":144,"line":167,"context":161},49,{"file":144,"line":169,"context":161},62,{"file":144,"line":96,"context":161},[],[173,190,198,213,221],{"entryPoint":174,"graph":175,"unsanitizedCount":14,"severity":189},"simpleonoffswitch_form (simple-on-off-switch.php:33)",{"nodes":176,"edges":186},[177,181],{"id":178,"type":179,"label":180,"file":144,"line":160},"n0","source","$_SERVER['PHP_SELF']",{"id":182,"type":183,"label":184,"file":144,"line":160,"wp_function":185},"n1","sink","echo() [XSS]","echo",[187],{"from":178,"to":182,"sanitized":188},false,"medium",{"entryPoint":191,"graph":192,"unsanitizedCount":14,"severity":189},"simpleonoffswitch_form_values (simple-on-off-switch.php:42)",{"nodes":193,"edges":196},[194,195],{"id":178,"type":179,"label":180,"file":144,"line":163},{"id":182,"type":183,"label":184,"file":144,"line":163,"wp_function":185},[197],{"from":178,"to":182,"sanitized":188},{"entryPoint":199,"graph":200,"unsanitizedCount":211,"severity":212},"simpleswitch_set (simple-on-off-switch.php:66)",{"nodes":201,"edges":209},[202,205],{"id":178,"type":179,"label":203,"file":144,"line":204},"$_POST (x2)",76,{"id":182,"type":183,"label":206,"file":144,"line":207,"wp_function":208},"update_option() [Settings Manipulation]",79,"update_option",[210],{"from":178,"to":182,"sanitized":188},2,"low",{"entryPoint":214,"graph":215,"unsanitizedCount":211,"severity":212},"simpleswitch_values_set (simple-on-off-switch.php:74)",{"nodes":216,"edges":219},[217,218],{"id":178,"type":179,"label":203,"file":144,"line":204},{"id":182,"type":183,"label":206,"file":144,"line":207,"wp_function":208},[220],{"from":178,"to":182,"sanitized":188},{"entryPoint":222,"graph":223,"unsanitizedCount":235,"severity":212},"\u003Csimple-on-off-switch> (simple-on-off-switch.php:0)",{"nodes":224,"edges":232},[225,227,228,230],{"id":178,"type":179,"label":226,"file":144,"line":160},"$_SERVER['PHP_SELF'] (x2)",{"id":182,"type":183,"label":184,"file":144,"line":160,"wp_function":185},{"id":229,"type":179,"label":203,"file":144,"line":204},"n2",{"id":231,"type":183,"label":206,"file":144,"line":207,"wp_function":208},"n3",[233,234],{"from":178,"to":182,"sanitized":188},{"from":229,"to":231,"sanitized":188},4,{"summary":237,"deductions":238},"The \"simple-onoff-switch\" v1.2 plugin exhibits a mixed security posture.  On the positive side, there are no known CVEs in its history, and the code analysis indicates a complete absence of dangerous functions, raw SQL queries, file operations, and external HTTP requests.  Furthermore, all SQL queries utilize prepared statements, which is a strong security practice.  However, significant concerns arise from the taint analysis and output escaping.  All analyzed taint flows have unsanitized paths, indicating a potential for data to be mishandled, though thankfully no critical or high severity issues were flagged in this area.\n\nThe most prominent weakness identified is the complete lack of output escaping across all six identified output points. This leaves the plugin highly susceptible to Cross-Site Scripting (XSS) vulnerabilities, where user-supplied data, if present, could be injected into the page and executed by the user's browser.  The absence of nonce checks and capability checks on the identified entry point (a single shortcode) is also a notable concern, potentially allowing unauthorized users to trigger plugin functionality.",[239,242,245,248],{"reason":240,"points":241},"Unescaped output on all identified outputs",20,{"reason":243,"points":244},"Taint flows with unsanitized paths",15,{"reason":246,"points":247},"Missing nonce checks",5,{"reason":249,"points":247},"Missing capability checks","2026-03-17T00:35:03.834Z",{"wat":252,"direct":257},{"assetPaths":253,"generatorPatterns":254,"scriptPaths":255,"versionParams":256},[],[],[],[],{"cssClasses":258,"htmlComments":260,"htmlAttributes":261,"restEndpoints":262,"jsGlobals":263,"shortcodeOutput":264},[259],"button-primary",[],[],[],[],[265],"[simpleswitch]"]