The Off Switch (formerly WP Avoid Slow) Security & Risk Analysis

wordpress.org/plugins/wp-avoid-slow

Disable unused WordPress features and remove bloat. 85 toggles for performance, security hardening, and WooCommerce — pure PHP, no .

100 active installs v1.9.8 PHP 7.4+ WP 5.0+ Updated Mar 25, 2026
bloatcore-web-vitalsoptimizeperformancespeed
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is The Off Switch (formerly WP Avoid Slow) Safe to Use in 2026?

Generally Safe

Score 100/100

The Off Switch (formerly WP Avoid Slow) has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "wp-avoid-slow" v1.9.7 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of any known vulnerabilities (CVEs) in its history and the clean taint analysis results are highly positive indicators. The plugin also demonstrates good practices by implementing nonce and capability checks. However, a significant concern arises from the single SQL query found, which is not using prepared statements. This represents a potential for SQL injection vulnerabilities if the data involved in this query originates from user input without proper sanitization. While the output escaping is at a reasonable level, the presence of unescaped outputs, even if a minority, still poses a minor risk of cross-site scripting (XSS) vulnerabilities.

Key Concerns

  • Raw SQL query without prepared statements
  • Unescaped output identified
Vulnerabilities
None known

The Off Switch (formerly WP Avoid Slow) Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

The Off Switch (formerly WP Avoid Slow) Release Timeline

v1.9.8Current
v1.9.7
v1.9.6
v1.9.5
v1.9.4
v1.9.3
v1.9.1
v1.9.0
v1.8.0
v1.7.0
v1.6.0
v1.5.0
v1.3.0
v1.2.1
v1.2.0
v1.1.1
v1.0
v1.0.0
v0.4
v0.3
Code Analysis
Analyzed Mar 16, 2026

The Off Switch (formerly WP Avoid Slow) Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
0 prepared
Unescaped Output
12
21 escaped
Nonce Checks
1
Capability Checks
3
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

0% prepared1 total queries

Output Escaping

64% escaped33 total outputs
Attack Surface

The Off Switch (formerly WP Avoid Slow) Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 110
actionadmin_menuadmin\class-wp-avoid-slow-admin-page.php:24
actionadmin_initadmin\class-wp-avoid-slow-admin-page.php:25
actionadmin_noticesadmin\class-wp-avoid-slow-admin-page.php:26
actionadmin_enqueue_scriptsadmin\class-wp-avoid-slow-admin-page.php:27
actionadmin_post_wp_avoid_slow_resetadmin\class-wp-avoid-slow-admin-page.php:28
actiontemplate_redirectincludes\modules\class-wp-avoid-slow-admin-hardening.php:76
actiontemplate_redirectincludes\modules\class-wp-avoid-slow-admin-hardening.php:80
filterwp_is_application_passwords_availableincludes\modules\class-wp-avoid-slow-admin-hardening.php:90
filteradmin_email_check_intervalincludes\modules\class-wp-avoid-slow-admin-hardening.php:94
filterwp_headersincludes\modules\class-wp-avoid-slow-admin-hardening.php:98
actionadmin_bar_menuincludes\modules\class-wp-avoid-slow-admin-hardening.php:102
actionadmin_initincludes\modules\class-wp-avoid-slow-admin-hardening.php:106
filterrest_authentication_errorsincludes\modules\class-wp-avoid-slow-admin-hardening.php:110
actionwp_loadedincludes\modules\class-wp-avoid-slow-admin-hardening.php:114
filterwp_sitemaps_add_providerincludes\modules\class-wp-avoid-slow-admin-hardening.php:118
filterx_redirect_byincludes\modules\class-wp-avoid-slow-admin-hardening.php:122
actionsend_headersincludes\modules\class-wp-avoid-slow-admin-hardening.php:126
filterwp_php_error_messageincludes\modules\class-wp-avoid-slow-admin-hardening.php:130
filtershow_admin_barincludes\modules\class-wp-avoid-slow-admin-hardening.php:134
actionadmin_initincludes\modules\class-wp-avoid-slow-admin-hardening.php:138
actionwp_dashboard_setupincludes\modules\class-wp-avoid-slow-admin-hardening.php:142
filteradmin_footer_textincludes\modules\class-wp-avoid-slow-admin-hardening.php:146
filterupdate_footerincludes\modules\class-wp-avoid-slow-admin-hardening.php:147
filterrest_endpointsincludes\modules\class-wp-avoid-slow-admin-hardening.php:151
filtersend_email_change_emailincludes\modules\class-wp-avoid-slow-admin-hardening.php:155
filtersend_password_change_emailincludes\modules\class-wp-avoid-slow-admin-hardening.php:156
filterauto_core_update_send_emailincludes\modules\class-wp-avoid-slow-admin-hardening.php:160
filterauto_plugin_update_send_emailincludes\modules\class-wp-avoid-slow-admin-hardening.php:161
filterauto_theme_update_send_emailincludes\modules\class-wp-avoid-slow-admin-hardening.php:162
actioninitincludes\modules\class-wp-avoid-slow-bloat-remover.php:64
actioninitincludes\modules\class-wp-avoid-slow-bloat-remover.php:68
actioninitincludes\modules\class-wp-avoid-slow-bloat-remover.php:77
filterscript_loader_srcincludes\modules\class-wp-avoid-slow-bloat-remover.php:81
filterstyle_loader_srcincludes\modules\class-wp-avoid-slow-bloat-remover.php:82
filterscript_module_loader_srcincludes\modules\class-wp-avoid-slow-bloat-remover.php:84
filterxmlrpc_enabledincludes\modules\class-wp-avoid-slow-bloat-remover.php:88
filterwp_headersincludes\modules\class-wp-avoid-slow-bloat-remover.php:89
actionadmin_enqueue_scriptsincludes\modules\class-wp-avoid-slow-bloat-remover.php:93
actionwp_enqueue_scriptsincludes\modules\class-wp-avoid-slow-bloat-remover.php:97
actioninitincludes\modules\class-wp-avoid-slow-bloat-remover.php:104
filterwp_speculation_rules_configurationincludes\modules\class-wp-avoid-slow-bloat-remover.php:108
actiontemplate_redirectincludes\modules\class-wp-avoid-slow-bloat-remover.php:112
actioninitincludes\modules\class-wp-avoid-slow-bloat-remover.php:116
actionadmin_enqueue_scriptsincludes\modules\class-wp-avoid-slow-bloat-remover.php:120
actioninitincludes\modules\class-wp-avoid-slow-bloat-remover.php:124
filtershow_recent_comments_widget_styleincludes\modules\class-wp-avoid-slow-bloat-remover.php:128
filtertiny_mce_pluginsincludes\modules\class-wp-avoid-slow-bloat-remover.php:148
filterwp_resource_hintsincludes\modules\class-wp-avoid-slow-bloat-remover.php:149
filterembed_oembed_discoverincludes\modules\class-wp-avoid-slow-bloat-remover.php:191
filterrewrite_rules_arrayincludes\modules\class-wp-avoid-slow-bloat-remover.php:199
actionwp_enqueue_scriptsincludes\modules\class-wp-avoid-slow-bloat-remover.php:202
filtershould_load_remote_block_patternsincludes\modules\class-wp-avoid-slow-block-editor.php:51
actioninitincludes\modules\class-wp-avoid-slow-block-editor.php:57
actioninitincludes\modules\class-wp-avoid-slow-block-editor.php:61
filterblock_editor_settings_allincludes\modules\class-wp-avoid-slow-block-editor.php:65
filteruse_widgets_block_editorincludes\modules\class-wp-avoid-slow-block-editor.php:70
actionpre_get_postsincludes\modules\class-wp-avoid-slow-database.php:94
actioninitincludes\modules\class-wp-avoid-slow-database.php:98
filterempty_trash_daysincludes\modules\class-wp-avoid-slow-database.php:102
filterstyle_loader_srcincludes\modules\class-wp-avoid-slow-image.php:66
filterthe_contentincludes\modules\class-wp-avoid-slow-image.php:71
filterpost_thumbnail_htmlincludes\modules\class-wp-avoid-slow-image.php:72
actionwpincludes\modules\class-wp-avoid-slow-image.php:78
filterthe_contentincludes\modules\class-wp-avoid-slow-image.php:79
filterpost_thumbnail_htmlincludes\modules\class-wp-avoid-slow-image.php:80
filterfallback_intermediate_image_sizesincludes\modules\class-wp-avoid-slow-image.php:84
filterbig_image_size_thresholdincludes\modules\class-wp-avoid-slow-image.php:88
filterintermediate_image_sizes_advancedincludes\modules\class-wp-avoid-slow-image.php:92
filterlogin_errorsincludes\modules\class-wp-avoid-slow-login.php:54
filterauthenticateincludes\modules\class-wp-avoid-slow-login.php:58
filterregisterincludes\modules\class-wp-avoid-slow-login.php:62
filterlogin_display_language_dropdownincludes\modules\class-wp-avoid-slow-login.php:66
filterallow_password_resetincludes\modules\class-wp-avoid-slow-login.php:70
filterlostpassword_urlincludes\modules\class-wp-avoid-slow-login.php:71
actionwp_default_scriptsincludes\modules\class-wp-avoid-slow-script-style.php:68
actionwp_enqueue_scriptsincludes\modules\class-wp-avoid-slow-script-style.php:72
actionwp_enqueue_scriptsincludes\modules\class-wp-avoid-slow-script-style.php:77
actioninitincludes\modules\class-wp-avoid-slow-script-style.php:81
filterscript_loader_tagincludes\modules\class-wp-avoid-slow-script-style.php:85
filterstyle_loader_tagincludes\modules\class-wp-avoid-slow-script-style.php:86
filterscript_loader_tagincludes\modules\class-wp-avoid-slow-script-style.php:91
actionwp_enqueue_scriptsincludes\modules\class-wp-avoid-slow-script-style.php:95
actionpre_pingincludes\modules\class-wp-avoid-slow-tweaks.php:55
actioninitincludes\modules\class-wp-avoid-slow-tweaks.php:59
filterwp_revisions_to_keepincludes\modules\class-wp-avoid-slow-tweaks.php:63
actiontemplate_redirectincludes\modules\class-wp-avoid-slow-tweaks.php:67
actiontemplate_redirectincludes\modules\class-wp-avoid-slow-tweaks.php:71
filterget_search_formincludes\modules\class-wp-avoid-slow-tweaks.php:72
filtercomments_openincludes\modules\class-wp-avoid-slow-tweaks.php:84
filterpings_openincludes\modules\class-wp-avoid-slow-tweaks.php:85
filtercomments_arrayincludes\modules\class-wp-avoid-slow-tweaks.php:87
filterget_comments_numberincludes\modules\class-wp-avoid-slow-tweaks.php:88
filterfeed_links_show_comments_feedincludes\modules\class-wp-avoid-slow-tweaks.php:90
actionadmin_menuincludes\modules\class-wp-avoid-slow-tweaks.php:93
actionadmin_bar_menuincludes\modules\class-wp-avoid-slow-tweaks.php:94
actionwp_dashboard_setupincludes\modules\class-wp-avoid-slow-tweaks.php:95
actionwp_enqueue_scriptsincludes\modules\class-wp-avoid-slow-woocommerce.php:56
actioninitincludes\modules\class-wp-avoid-slow-woocommerce.php:60
actionwp_enqueue_scriptsincludes\modules\class-wp-avoid-slow-woocommerce.php:64
actionenqueue_block_assetsincludes\modules\class-wp-avoid-slow-woocommerce.php:65
actionwp_enqueue_scriptsincludes\modules\class-wp-avoid-slow-woocommerce.php:69
actionwp_dashboard_setupincludes\modules\class-wp-avoid-slow-woocommerce.php:73
actioninitincludes\modules\class-wp-avoid-slow-woocommerce.php:77
filterwoocommerce_admin_featuresincludes\modules\class-wp-avoid-slow-woocommerce.php:78
actionwidgets_initincludes\modules\class-wp-avoid-slow-woocommerce.php:82
filterwp_headersincludes\modules\class-wp-avoid-slow-woocommerce.php:86
filterwc_stripe_load_scripts_on_product_page_when_prbs_disabledincludes\modules\class-wp-avoid-slow-woocommerce.php:90
filterwc_stripe_load_scripts_on_cart_page_when_prbs_disabledincludes\modules\class-wp-avoid-slow-woocommerce.php:91
filterwoocommerce_related_productsincludes\modules\class-wp-avoid-slow-woocommerce.php:95
actionplugins_loadedwp-avoid-slow.php:170
Maintenance & Trust

The Off Switch (formerly WP Avoid Slow) Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 25, 2026
PHP min version7.4
Downloads7K

Community Trust

Rating100/100
Number of ratings6
Active installs100
Developer Profile

The Off Switch (formerly WP Avoid Slow) Developer Profile

Abhishek Deshpande

1 plugin · 100 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect The Off Switch (formerly WP Avoid Slow)

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-avoid-slow/assets/css/backend.css/wp-content/plugins/wp-avoid-slow/assets/js/backend.js
Script Paths
/wp-content/plugins/wp-avoid-slow/assets/js/backend.js
Version Parameters
wp-avoid-slow/assets/css/backend.css?ver=wp-avoid-slow/assets/js/backend.js?ver=

HTML / DOM Fingerprints

HTML Comments
<!-- This is a placeholder for the admin bar -->
JS Globals
WP_Avoid_Slow_Admin
REST Endpoints
/wp-json/wp-avoid-slow/v1/options
FAQ

Frequently Asked Questions about The Off Switch (formerly WP Avoid Slow)