Does Stage WP Plugin Manager have any unpatched vulnerabilities?

No. All known vulnerabilities in Stage WP Plugin Manager have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Stage WP Plugin Manager compatible with WordPress 4.0.38?

According to WordPress.org data, Stage WP Plugin Manager 1.0 has been tested up to WordPress 4.0.38. Check the plugin's changelog for the latest compatibility information.

How often is Stage WP Plugin Manager updated?

Stage WP Plugin Manager was last updated on Dec 7, 2014. Frequent updates are generally a positive security signal.

What is Stage WP Plugin Manager's security score?

Stage WP Plugin Manager has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Stage WP Plugin Manager Security & Risk Analysis

wordpress.org/plugins/stage-wp-plugin-manager

Gives you the option to determine which plugins must be automatically activated either on local, staging or productions stages.

10 active installs v1.0 PHP + WP 3.0+ Updated Dec 7, 2014

managerpluginsstagetesting

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Stage WP Plugin Manager Safe to Use in 2026?

Generally Safe

Score 85/100

Stage WP Plugin Manager has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11yr ago

Risk Assessment

The stage-wp-plugin-manager v1.0 plugin exhibits a mixed security posture. On the positive side, it utilizes prepared statements for all SQL queries and has no recorded vulnerability history, suggesting a potentially stable codebase. However, significant concerns arise from the static analysis. The plugin has a single entry point in the form of an AJAX handler that lacks any authentication or capability checks, presenting a clear avenue for unauthorized access and potential malicious actions. Furthermore, a high percentage of output (96%) is not properly escaped, indicating a strong risk of cross-site scripting (XSS) vulnerabilities when user-supplied data is displayed back to users.

Key Concerns

AJAX handler without auth checks
High percentage of unescaped output

Vulnerabilities

None known

Stage WP Plugin Manager Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

Stage WP Plugin Manager Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

1 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

4% escaped23 total outputs

Data Flows

3 unsanitized

Data Flow Analysis

3 flows3 with unsanitized paths

process_ajax (stage-wp-plugin-manager-loader.class.php:130)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

1 unprotected

Stage WP Plugin Manager Attack Surface

Entry Points1

Unprotected1

AJAX Handlers 1

authwp_ajax_stage_wp_plugin_manager_process_ajaxstage-wp-plugin-manager-loader.class.php:47

WordPress Hooks 10

filteroption_active_pluginsstage-wp-plugin-manager-loader.class.php:39

filtersite_option_active_sitewide_pluginsstage-wp-plugin-manager-loader.class.php:41

actionadmin_initstage-wp-plugin-manager-loader.class.php:43

actionadmin_footerstage-wp-plugin-manager-loader.class.php:45

filteradmin_footer_textstage-wp-plugin-manager-loader.class.php:49

actionadmin_menustage-wp-plugin-manager-loader.class.php:54

actionnetwork_admin_menustage-wp-plugin-manager-loader.class.php:55

actionadmin_noticesstage-wp-plugin-manager-loader.class.php:57

actionnetwork_admin_noticesstage-wp-plugin-manager-loader.class.php:58

actioninitstage-wp-plugin-manager-loader.class.php:60

Maintenance & Trust

Stage WP Plugin Manager Maintenance & Trust

Maintenance Signals

WordPress version tested4.0.38

Last updatedDec 7, 2014

PHP min version

Downloads3K

Community Trust

Rating100/100

Number of ratings3

Active installs10

Alternatives

Stage WP Plugin Manager Alternatives

WP Plugin Manager – Deactivate plugins per page

wp-plugin-manager

"WP Plugin Manager" is a plugin that allows you to disable plugins on specific pages, posts, or devices for better performance.

3K 2 CVEs

Plugin Columns

plugin-columns

Plugin Columns adds several columns to the plugins list (Categories, dates, counters). Useful if you have a lot of plugins installed to filter by cate …

100 No CVEs