[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbQ2N5RJypXIc7ISxMXZfzcYMyQ36PuPqs0W55GLavv4":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":23,"download_link":24,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":139,"fingerprints":198},"unagi","Unagi","0.2.2","handyplugins","https:\u002F\u002Fprofiles.wordpress.org\u002Fhandyplugins\u002F","\u003Cp>Unagi is a WordPress plugin that helps keep the admin dashboard clean. It’s a zero-configuration plugin; just activate and get rid of the nags.\u003C\u002Fp>\n\u003Ch4>How does it work?\u003C\u002Fh4>\n\u003Cp>It buffers all the output that hooked into \u003Ccode>admin_notices\u003C\u002Fcode> action and then displays it within a dedicated notification page.\u003C\u002Fp>\n\u003Ch4>Limitations & Tips\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>If, there is a notification message only added for a particular page. It won’t be displayed on the notifications page. You can use \u003Ccode>unagi_show_diff\u003C\u002Fcode> filter to allow displaying non-global messages.\u003C\u002Fli>\n\u003Cli>The plugin only respects notifications messages that have “notice” class by default. Most of the plugins use “notice” class as a wrapper of the output. You can use \u003Ccode>unagi_xpath_expression\u003C\u002Fcode> filter to customize targered xpath.\u003C\u002Fli>\n\u003Cli>\u003Ccode>edit_posts\u003C\u002Fcode> is the default capability. It can be overridden with \u003Ccode>unagi_required_capability\u003C\u002Fcode> filter.\u003C\u002Fli>\n\u003Cli>By default, plugin saves the output in the usermeta and renders saved output. If you need to avoid DB calls, you can use \u003Ccode>unagi_show_notifications_nicely\u003C\u002Fcode> filter.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>Unagi – “It’s not something you are , it’s something you have.”\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>If you like our Unagi plugin, then consider checking out our other projects:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fhandyplugins.co\u002Fmagic-login-pro\u002F\" rel=\"friend nofollow ugc\">Magic Login Pro\u003C\u002Fa> – Easy, secure, and passwordless authentication for WordPress.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fhandyplugins.co\u002Feasy-text-to-speech\u002F\" rel=\"friend nofollow ugc\">Easy Text-to-Speech for WordPress\u003C\u002Fa> – Transform your textual content into high-quality synthesized speech with Amazon Polly.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fhandyplugins.co\u002Fhandywriter\u002F\" rel=\"friend nofollow ugc\">Handywriter\u003C\u002Fa> – AI-powered writing assistant that can help you create content for your WordPress.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fhandyplugins.co\u002Fpaddlepress-pro\u002F\" rel=\"friend nofollow ugc\">PaddlePress PRO\u003C\u002Fa> – Paddle Plugin for WordPress\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpoweredcache.com\u002F\" rel=\"friend nofollow ugc\">Powered Cache\u003C\u002Fa> – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fhandyplugins.co\u002Fwp-accessibility-toolkit\u002F\" rel=\"friend nofollow ugc\">WP Accessibility Toolkit\u003C\u002Fa> – A collection of tools to help you make your WordPress more accessible.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Contributing & Bug Report\u003C\u002Fh4>\n\u003Cp>Bug reports and pull requests are welcome on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FHandyPlugins\u002Funagi\" rel=\"nofollow ugc\">Github\u003C\u002Fa>.\u003C\u002Fp>\n","Unagi clean-up your WordPress notices from the dashboard and show them under the \"Notifications\" pages.",700,11378,100,2,"2025-11-21T20:33:00.000Z","6.9.4","5.0","5.6",[20,21,22],"admin-notice","nags","notification","https:\u002F\u002Fgithub.com\u002FHandyPlugins\u002Funagi","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Funagi.0.2.2.zip",0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":13,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},10,8380,30,94,"2026-04-04T13:55:15.012Z",[36,60,82,98,118],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":57,"download_link":58,"security_score":59,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"hide-admin-notices","Hide Admin Notices","2.1","PontetLabs","https:\u002F\u002Fprofiles.wordpress.org\u002Fpontetlabs\u002F","\u003Cp>New & improved!\u003C\u002Fp>\n\u003Cp>Have you become tired of the clutter of Admin Notices that appear at the top of every page in your WordPress Dashboard?\u003C\u002Fp>\n\u003Cp>With each new plugin or theme that you install, there seem to be more and more notices that appear at the top of each page!\u003C\u002Fp>\n\u003Cp>With this simple plugin, you can claim back all this wasted screen space so that you can focus on what is important – creating your content.\u003C\u002Fp>\n\u003Cp>Hide Admin Notices hides away all Notices, Messages, and Update Nags, and makes it easy for you to see them again when you want.\u003C\u002Fp>\n\u003Ch4>HOW DOES IT WORK?\u003C\u002Fh4>\n\u003Cp>After activating the plugin, you will have a new \u003Cstrong>Show Notices\u003C\u002Fstrong> button at the top right-hand corner of your admin pages – just next to \u003Cstrong>Screen Options\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Click the button to reveal all hidden notices, then simply click the button again to hide them.\u003C\u002Fp>\n\u003Ch4>SUPPORT\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Like this plugin?\u003C\u002Fstrong> Please \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fhide-admin-notices\u002Freviews\u002F?filter=5\" rel=\"ugc\">Rate It\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fwww.buymeacoffee.com\u002Fpontetlabs\" rel=\"nofollow ugc\">Donate a $1\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Have a problem?\u003C\u002Fstrong> Please write a message in the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fhide-admin-notices\u002F\" rel=\"ugc\">WordPress Support Forum\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003Cli>Russian\u003C\u002Fli>\n\u003Cli>German\u003C\u002Fli>\n\u003Cli>Japanese\u003C\u002Fli>\n\u003Cli>Italian\u003C\u002Fli>\n\u003Cli>Spanish\u003C\u002Fli>\n\u003C\u002Ful>\n","Hide – or show – WordPress Dashboard Notices, Messages, Update Nags etc. ... for everything!",20000,139848,90,19,"2024-02-18T17:52:00.000Z","6.4.8","5.9.8","7.4",[37,53,54,55,56],"hide-admin-notifications","hide-dashboard-notices","hide-dashboard-notifications","hide-updates-nags","https:\u002F\u002Fpontetlabs.com\u002Fhide-admin-notices","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhide-admin-notices.zip",85,{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":44,"downloaded":68,"rating":69,"num_ratings":70,"last_updated":71,"tested_up_to":72,"requires_at_least":73,"requires_php":74,"tags":75,"homepage":78,"download_link":79,"security_score":80,"vuln_count":14,"unpatched_count":25,"last_vuln_date":81,"fetched_at":27},"wp-hide-backed-notices","Hide Dashboard Notifications","1.4.6","WP Republic","https:\u002F\u002Fprofiles.wordpress.org\u002Fwprepublic\u002F","\u003Cp>Warnings and notices can be helpful for developers as they notify them for debugging issues with their code. Though these notices can be sometimes informative, quite often they become frustrating, inconvenient and even spammy; especially since they are a way of promoting the additional services offered by some plugins. The end result is a bloated WordPress Dashboard where you have to spend a lot of time and energy to close all those nags in order to clear your WordPress website’s backend. Hide Dashboard Notifications allows you to easily turn off those nags and notifications & hide plugin updates. It also stores them under the Notifications Tab where you can review them later if you want to.\u003C\u002Fp>\n\u003Ch3>Short Description\u003C\u002Fh3>\n\u003Cp>Save your WordPress Dashboard from Notifications Bloat! Hide all those annoying and spammy notices from your WordPress Dashboard. You can also enable the option to store and view them all together under the Notifications Tab.\u003C\u002Fp>\n\u003Ch3>Hide Dashboard Notifications Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Disables showing Plugin & Theme Notifications on your WordPress Dashboard.\u003C\u002Fli>\n\u003Cli>Disables showing WordPress Notifications from the WordPress Dashboard & Admin Bar.\u003C\u002Fli>\n\u003Cli>Lets you choose if you want to Hide the Dashboard Notifications for administrators(by default) or all backend user roles.\u003C\u002Fli>\n\u003Cli>Shows blocked notifications under the Notifications Tab.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How it works:\u003C\u002Fh3>\n\u003Cp>As is the case with most WordPress sites the number of plugins installed is often quite big and so is the number of notifications popping up on your WordPress Dashboard. We are sure you are familiar with the chaos these can create while you work. As we understand how difficult it is for you to focus on such clutter, we have created the Hide Dashboard Notifications Plugin. It takes care of all plugin notifications for you and allows you to manage them successfully by silencing them so that you work undisturbed within a clear WordPress Dashboard. Hide WordPress Dashboard Notifications is the easiest and most convenient way to deal with dashboard notifications. This way you can declutter your dashboard and stay focused on your work. All you need to do is install the Hide WordPress Dashboard Notifications plugin and choose the settings that suit your needs best. You can choose to hide the notifications coming from the installed plugins so that you get to focus on your work and get things done. You can even opt for hiding the WordPress update notices. As new releases of updates are rolled out frequently, you can choose to silence those notifications for a certain amount of time, or until you finish the issue you are working on. You also have the option of hiding the dashboard notices for only the Administrators of your website. The rest of the users of the WordPress website will still be able to receive the notices. These pop-ups and notices are not deleted. They are simply put on hold. Should you wish to go through them you will find them all perched under the notifications tab of the plugin. This way, you will be able to sort them out at your own convenience,  tackling them successfully. Want to get rid of the annoying notices which is displayed when a new plugin is installed? Then you’re at the right place 🙂 Install our Hide Backend Notifications plugin and all your problem will be solved.\u003C\u002Fp>\n\u003Ch3>Reviews\u003C\u002Fh3>\n\u003Cp>If you have installed the Hide WordPress DashBoard Notifications plugin then go ahead and leave a \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fwp-hide-backed-notices\u002Freviews\u002F\" rel=\"ugc\">review\u003C\u002Fa>. We would be happy to receive your feedback and we will take it seriously into consideration.\u003C\u002Fp>\n\u003Ch3>Contribute\u003C\u002Fh3>\n\u003Cp>If you find this useful and if you want to contribute, there are three ways:\u003C\u002Fp>\n\u003Col>\n\u003Cli>You can \u003Ca href=\"https:\u002F\u002Fwprepublic.com\u002Fcontact\" rel=\"nofollow ugc\">contact us\u003C\u002Fa> and submit your bug reports, suggestions and requests for features;\u003C\u002Fli>\n\u003Cli>If you want to translate it to your language (there are just a few lines of text), you can use the \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fwp-hide-backed-notices\" rel=\"nofollow ugc\">translation project\u003C\u002Fa>;\u003C\u002Fli>\n\u003Cli>Using the plugin is free, but if you want you can support my efforts by donating with Helen Keller International \u003Ca href=\"https:\u002F\u002Fsecure.givewell.org\u002F?charity=helen_keller_initiative\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Fol>\n","Warnings and notices can be helpful for developers as they notify them for debugging issues with their code. Though these notices can be sometimes inf …",290551,78,33,"2026-03-03T21:48:00.000Z","6.7.5","3.0","",[37,53,55,76,77],"hide-nags","hide-wordpress-plugin-update","http:\u002F\u002Fwprepublic.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-hide-backed-notices.1.4.6.zip",99,"2024-06-20 00:00:00",{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":92,"num_ratings":93,"last_updated":94,"tested_up_to":49,"requires_at_least":95,"requires_php":18,"tags":96,"homepage":74,"download_link":97,"security_score":59,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"disable-admin-dashboard-notices","Disable Admin Dashboard Notices – Get a distraction free WordPress backend","0.1","WPFraternity","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpfraternity\u002F","\u003Cp>“Disable Admin Dashboard Notices” is a handy WordPress plugin designed to streamline and enhance the user experience for WordPress website administrators. In the bustling world of website management, the WordPress Admin Dashboard can sometimes overwhelm users with an abundance of notices, alerts, and messages from various plugins. These notices, while informative, can clutter the workspace and distract from essential tasks.\u003C\u002Fp>\n\u003Cp>This plugin addresses this issue by allowing users to disable or hide the notices from the WordPress dashboard. It achieves this by providing a user-friendly and intuitive solution. This plugin is intentionally lightweight and maintains WordPress standards. Once installed, the plugin enables users to toggle the visibility of notices with ease, helping them declutter the dashboard and create a more focused and distraction-free workspace.\u003C\u002Fp>\n\u003Cp>Key features of the “Disable Admin Dashboard Notices” plugin include:\u003C\u002Fp>\n\u003Cp>Dashboard Decluttering: Disable or hide the notices and notifications, reducing visual distractions for a cleaner and more focused Dashboard.\u003C\u002Fp>\n\u003Cp>User-Friendly Interface: The plugin is designed with ease of use in mind, making it accessible to both beginners and experienced WordPress users.\u003C\u002Fp>\n\u003Cp>Reversible: Users can easily revert changes by using the button from the Admin Bar beside the “Screen Options” to re-enable all notices they wish to see again. From there admin can hide them again.\u003C\u002Fp>\n\u003Cp>Improved Productivity: By minimizing distractions and creating a more organized Dashboard, the plugin enhances productivity for WordPress website administrators and content creators.\u003C\u002Fp>\n","\"Disable Admin Dashboard Notices\" is a handy WordPress plugin designed to streamline and enhance the user experience for WordPress website a …",1000,8292,60,4,"2023-11-13T17:39:00.000Z","4.9",[37,53,54,55,56],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisable-admin-dashboard-notices.zip",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":33,"num_ratings":108,"last_updated":109,"tested_up_to":16,"requires_at_least":18,"requires_php":51,"tags":110,"homepage":114,"download_link":115,"security_score":116,"vuln_count":14,"unpatched_count":25,"last_vuln_date":117,"fetched_at":27},"disable-admin-notices","Disable Admin Notices – Hide Dashboard Notifications","1.4.3","Themeisle","https:\u002F\u002Fprofiles.wordpress.org\u002Fthemeisle\u002F","\u003Cp>WordPress admin notices and dashboard notifications can quickly become overwhelming. Plugin alerts, theme warnings, update messages, and promotional notices often take up valuable space and disrupt your workflow. \u003Cstrong>Disable Admin Notices\u003C\u002Fstrong> gives you full control by letting you hide, remove, or disable admin notices across the entire dashboard.\u003C\u002Fp>\n\u003Cp>You can hide all notifications, disable selected notices only, or move everything into a clean compact bar so messages no longer clutter your admin screen. The plugin also lets you \u003Cstrong>disable plugin and theme update notifications\u003C\u002Fstrong>, \u003Cstrong>disable WordPress core update alerts\u003C\u002Fstrong>, manage which items appear in the admin bar, and even block redirect URLs used by some plugins to show ads or promotional pages.\u003C\u002Fp>\n\u003Cp>Whether you want a cleaner dashboard, fewer interruptions, or complete control over WordPress admin notifications, this plugin helps you keep your workspace organized and distraction-free.\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Disable Admin Notices\u003C\u002Fstrong>\u003Cbr \u002F>\n– Disable admin notices globally or hide selected notifications only\u003Cbr \u002F>\n– Hide dashboard notices and show them in a single compact line\u003Cbr \u002F>\n– Option to display all admin notifications in the WordPress admin bar\u003Cbr \u002F>\n– Disable plugin update notifications\u003Cbr \u002F>\n– Disable WordPress core update notifications\u003Cbr \u002F>\n– Access all hidden notices anytime from the plugin dashboard\u003Cbr \u002F>\n– Reset or restore hidden notices at any time\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Disable Admin Bar Items\u003C\u002Fstrong>\u003Cbr \u002F>\n– Choose which items appear in the WordPress admin bar\u003Cbr \u002F>\n– Hide or remove unnecessary plugin, theme, or tool menu items to reduce clutter\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Block Ad Redirects\u003C\u002Fstrong>\u003Cbr \u002F>\n– Block specific redirect URLs to prevent plugins from sending you to ads or promotional screens\u003Cbr \u002F>\n– Avoid unexpected admin redirects when activating or updating plugins\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>We’re here to help. Feel free to open a new thread on the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fdisable-admin-notices\u002F\" rel=\"ugc\">Support Forum\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Useful Resources\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>If you like this plugin, you’re sure to love \u003Ca href=\"https:\u002F\u002Fthemeisle.com\u002Fwordpress-plugins\u002F\" rel=\"nofollow ugc\">our other plugins\u003C\u002Fa> as well.\u003C\u002Fli>\n\u003Cli>Our blog is a great place to \u003Ca href=\"https:\u002F\u002Fthemeisle.com\u002Fblog\u002F\" rel=\"nofollow ugc\">learn more about WordPress\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Get the most out of your website with our helpful \u003Ca href=\"https:\u002F\u002Fyoutube.com\u002Fplaylist?list=PLmRasCVwuvpSep2MOsIoE0ncO9JE3FcKP\" rel=\"nofollow ugc\">WordPress YouTube Tutorials\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n","Disable admin notices and hide dashboard notifications from plugins, themes and core. Hide all notices, selected ones, or show them in a single line.",100000,1365060,348,"2026-02-17T09:11:00.000Z",[111,37,53,112,113],"admin-notices","nnotifications","update-notifications","https:\u002F\u002Fclearfy.pro\u002Fdisable-admin-notices","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisable-admin-notices.1.4.3.zip",98,"2026-02-24 20:56:18",{"slug":119,"name":120,"version":121,"author":122,"author_profile":123,"description":124,"short_description":125,"active_installs":126,"downloaded":127,"rating":128,"num_ratings":129,"last_updated":130,"tested_up_to":16,"requires_at_least":131,"requires_php":74,"tags":132,"homepage":137,"download_link":138,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"disable-wp-notification","Disable WP Notification","3.4","Sourabh Agrawal","https:\u002F\u002Fprofiles.wordpress.org\u002Fsourabhasct\u002F","\u003Cp>Showing the notifications related to plugins and themes is not a good idea for all the user roles. Disable WP Notification helps you to disable all the spammy notifications from the entire wordpress dashboard.\u003C\u002Fp>\n\u003Cp>I know sometimes it is require to get the notifications, so considering this, Our experienced developers provide you the following options:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enable all notifications\u003C\u002Fli>\n\u003Cli>Disable Notifications for all users\u003C\u002Fli>\n\u003Cli>Disable Notifications for all users except admin\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Disable WP Notification Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Disable all the spammy notifications and clean the Dashboard.\u003C\u002Fli>\n\u003Cli>A panel to show all the disabled notifications.\u003C\u002Fli>\n\u003Cli>Disable the notifications for all the users including admin.\u003C\u002Fli>\n\u003Cli>Disable the notifications for all the users excluding admin. That means, except admin this will work only on the other users.\u003C\u002Fli>\n\u003Cli>Disable theme updates and notification.\u003C\u002Fli>\n\u003Cli>Disable plugin updates.\u003C\u002Fli>\n\u003Cli>Only Admin can manage the settings.\u003C\u002Fli>\n\u003C\u002Ful>\n","Best wordpress plugin to remove all the admin panel notifications in just one click. Including the theme and plugin update notification.",10000,65716,86,12,"2026-03-10T05:53:00.000Z","6.0",[99,133,134,135,136],"disable-dashboard-notifications","disable-plugin-update","disable-theme-update","remove-unwanted-notification","https:\u002F\u002Fsourabhagrawal.com\u002Fdisable-wp-notification","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisable-wp-notification.3.4.zip",{"attackSurface":140,"codeSignals":168,"taintFlows":188,"riskAssessment":189,"analyzedAt":197},{"hooks":141,"ajaxHandlers":164,"restRoutes":165,"shortcodes":166,"cronEvents":167,"entryPointCount":25,"unprotectedCount":25},[142,148,150,154,158,160],{"type":143,"name":144,"callback":145,"file":146,"line":147},"action","init","anonymous","includes\\core.php",22,{"type":143,"name":144,"callback":145,"file":146,"line":149},23,{"type":143,"name":151,"callback":145,"file":152,"line":153},"admin_menu","includes\\notifications.php",24,{"type":143,"name":155,"callback":145,"file":156,"line":157},"admin_notices","includes\\shovel.php",25,{"type":143,"name":155,"callback":145,"file":156,"line":159},26,{"type":143,"name":161,"callback":145,"file":162,"line":163},"plugins_loaded","plugin.php",43,[],[],[],[],{"dangerousFunctions":169,"sqlUsage":170,"outputEscaping":177,"fileOperations":25,"externalRequests":25,"nonceChecks":25,"capabilityChecks":171,"bundledLibraries":187},[],{"prepared":171,"raw":171,"locations":172},1,[173],{"file":174,"line":175,"context":176},"uninstall.php",16,"$wpdb->query() with variable interpolation",{"escaped":171,"rawEcho":178,"locations":179},3,[180,183,185],{"file":152,"line":181,"context":182},81,"raw output",{"file":156,"line":184,"context":182},61,{"file":156,"line":186,"context":182},91,[],[],{"summary":190,"deductions":191},"The static analysis of the \"unagi\" v0.2.2 plugin reveals a generally good security posture with a very limited attack surface. The absence of AJAX handlers, REST API routes, shortcodes, and cron events significantly reduces potential entry points for attackers. Furthermore, the analysis shows no dangerous functions, no file operations, no external HTTP requests, and no taint flows, which are all positive indicators of secure coding practices.  The presence of capability checks, even if only one is noted, is also a good sign.\n\nHowever, there are areas for improvement. The plugin has raw SQL queries present, with only 50% utilizing prepared statements, which could lead to SQL injection vulnerabilities if not handled carefully. Additionally, the output escaping is low, with only 25% of outputs properly escaped. This raises concerns about Cross-Site Scripting (XSS) vulnerabilities, as unsanitized output can be injected with malicious scripts. The lack of nonce checks on potential entry points (though the attack surface is zero) is also a minor concern for future development. The plugin's vulnerability history is clean, with no known CVEs, which is a strong positive, suggesting a lack of historical security issues. This suggests the developers are either diligent or the plugin is relatively new\u002Funpopular, limiting past exposure.\n\nIn conclusion, \"unagi\" v0.2.2 demonstrates strengths in minimizing its attack surface and avoiding common pitfalls like bundled libraries and external requests. The clean vulnerability history is a significant advantage. However, the identified issues with SQL query preparation and output escaping represent tangible risks that should be addressed to improve the plugin's overall security. Addressing these points would elevate its security posture considerably.",[192,194],{"reason":193,"points":30},"SQL queries not using prepared statements",{"reason":195,"points":196},"Low percentage of properly escaped output",6,"2026-03-16T19:21:13.003Z",{"wat":199,"direct":208},{"assetPaths":200,"generatorPatterns":203,"scriptPaths":204,"versionParams":205},[201,202],"\u002Fwp-content\u002Fplugins\u002Funagi\u002Fincludes\u002Fcss\u002Fnotifications.css","\u002Fwp-content\u002Fplugins\u002Funagi\u002Fincludes\u002Fjs\u002Fnotifications.js",[],[202],[206,207],"unagi\u002Fincludes\u002Fcss\u002Fnotifications.css?ver=","unagi\u002Fincludes\u002Fjs\u002Fnotifications.js?ver=",{"cssClasses":209,"htmlComments":213,"htmlAttributes":217,"restEndpoints":219,"jsGlobals":220,"shortcodeOutput":222},[210,211,212],"unagi-notification-center","update-plugins","update-count",[214,215,216],"Don't need to display count if we are not showing the output in the nice way","Don't care if the notices don't respect default \"notice\" classes.\n     * But adding a filter just in case someone else needed","Dirty way to make it work with WooCommerce setup wizard\n     * It is what it is!!!...",[218],"data-unagi-notification-content",[],[221],"window.Unagi",[]]