[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fh_7WhOyL0zoroA8Jo3GdkFXobdJllRePzWF0q34x8dg":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":133,"fingerprints":156},"wp-hide-add-new-theme","Wp Hide Add New Theme","1.0","Ismail Ashraf","https:\u002F\u002Fprofiles.wordpress.org\u002Fismail99\u002F","\u003Cp>This plugin will disable the functionalities of add new themes, plugins and file editing in your WordPress dashboard. If someone access your backend he cannot do anything to your website.\u003C\u002Fp>\n","This plugin will disable the functionalities of add new themes, plugins and file editing in your WordPress dashboard. If someone access your backend h &hellip;",0,951,"2019-02-23T15:57:00.000Z","5.0.25","5.0","",[18,19,20,21,22],"admin","disable","hide-add-new-theme","plugins","wp-admin","https:\u002F\u002Fwww.it-paths.com\u002Fwp-hide-add-new-theme\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-hide-add-new-theme.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"ismail99",1,30,84,"2026-04-05T01:56:08.318Z",[36,54,73,95,114],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":11,"num_ratings":11,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":16,"tags":49,"homepage":51,"download_link":52,"security_score":53,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"disable-add-new-plugins","Disable Add New Plugins","1.7","Nikunj Soni","https:\u002F\u002Fprofiles.wordpress.org\u002Fnikunjsoni\u002F","\u003Cp>This plugin will disable the functionalities of add new plugins and file editing in your WordPress admin panel. It will also give security to file being edited from the backend.\u003C\u002Fp>\n","This plugin will disable the functionalities of add new plugins and file editing in your WordPress admin panel. It will also give security to file bei &hellip;",10,2979,"2025-10-08T15:27:00.000Z","6.8.5","3.7",[18,19,21,50,22],"security","http:\u002F\u002Fwww.nikunjsoni.co.in\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisable-add-new-plugins.1.7.zip",100,{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":53,"num_ratings":64,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":68,"tags":69,"homepage":16,"download_link":72,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"edit-lock","Edit Lock","1.0.3","doublejar","https:\u002F\u002Fprofiles.wordpress.org\u002Fdoublejar\u002F","\u003Cp>When you build a custom-made website, either for your client or yourself, there often are pages which contains HTML codes which may break if edited by casual users.\u003C\u002Fp>\n\u003Cp>This plugin allows you to disable editing on selected pages, to protect the pages from accidental or unwanted changes. By locking pages and posts, these crucial pages cannot be edited or deleted by users. An exception can be added for administrators to modify pages irregardless of locking status.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Locks any pages, posts, and even media files\u003C\u002Fli>\n\u003Cli>Custom post types are also supported\u003C\u002Fli>\n\u003Cli>Works with Gutenberg and Classic Editor\u003C\u002Fli>\n\u003Cli>Two locking mechanisms available\u003C\u002Fli>\n\u003Cli>Allows admin users to modify pages without unlocking or lock for everyone\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Locking mechanisms:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Lock mode — Disable editing or deleting locked posts.\u003C\u002Fli>\n\u003Cli>Warn mode — Warn users when editing locked posts. Quick edit and deletion are disabled.\u003C\u002Fli>\n\u003C\u002Ful>\n","Disable page editing on selected pages, to protect the pages from accidental or unwanted changes that might break your site.",500,4971,2,"2022-10-09T00:44:00.000Z","6.1.10","5.4","7.0",[70,71,50,22],"disable-post-edit","posts","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fedit-lock.1.0.3.zip",{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":62,"downloaded":81,"rating":82,"num_ratings":83,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":16,"tags":87,"homepage":91,"download_link":92,"security_score":93,"vuln_count":31,"unpatched_count":31,"last_vuln_date":94,"fetched_at":27},"wp-users-disable","Disable User Login","1.0.2","brainvireinfo","https:\u002F\u002Fprofiles.wordpress.org\u002Fbrainvireinfo\u002F","\u003Cp>The plug-in lists out all the existing users’ accounts and gives the ability to admin to disable specific user accounts via email address.\u003C\u002Fp>\n\u003Cp>Once installed and activated, this plug-in lists out all the user accounts available. The admin will be asked to enter the email address of the user who they want to restrict from logging in. If the disabled user tries to login, they will be logged out immediately and redirected to the login page with a message showing up as “User account disabled”.\u003C\u002Fp>\n\u003Ch4>How is it Useful?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>You can restrict another user (who has an account) from making any changes during development.\u003C\u002Fli>\n\u003Cli>You have a client who has an unpaid invoice.\u003C\u002Fli>\n\u003Cli>You want to restrict malicious users.\u003C\u002Fli>\n\u003C\u002Ful>\n","The plug-in lists out all the existing users’ accounts and gives the ability to admin to disable specific user accounts via email address.",11282,96,6,"2024-12-02T07:39:00.000Z","6.7.5","4.0.0",[88,89,90],"disable-user","wp-admin-disable","wp-login-disable","http:\u002F\u002Fwww.brainvire.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-users-disable.1.0.2.zip",71,"2022-09-14 00:00:00",{"slug":96,"name":97,"version":57,"author":98,"author_profile":99,"description":100,"short_description":101,"active_installs":11,"downloaded":102,"rating":11,"num_ratings":11,"last_updated":103,"tested_up_to":104,"requires_at_least":105,"requires_php":106,"tags":107,"homepage":16,"download_link":113,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"hide-admin-bar-by-wp-all-support","Hide WP Admin Bar by WP ALL SUPPORT","WP ALL SUPPORT","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpallsupport\u002F","\u003Ch4>Allows to hide WP Admin Bar on the frontend\u003C\u002Fh4>\n\u003Cp>Hide the admin bar for all.\u003Cbr \u002F>\nHide the admin bar for specific users.\u003Cbr \u002F>\nHide admin bar for specific user roles.\u003Cbr \u002F>\nHide the admin bar for default and cusotm post type posts like pages, posts etc.\u003C\u002Fp>\n\u003Cp>This plugin is 100% translatable.\u003C\u002Fp>\n\u003Ch4>More plugins by WP ALL SUPPORT\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhide-admin-bar-by-wp-all-support\u002F\" rel=\"ugc\">Hide WP Admin Bar by WP ALL SUPPORT\u003C\u002Fa> – Hide admin bar based on user roles and conditional logic\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fedd-payu-gateway\u002F\" rel=\"ugc\">PayUmoney\u003C\u002Fa> – PayUmoney payment gateway for Easy Digital Downloads\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fedd-payu-latam-gateway\u002F\" rel=\"ugc\">PayUmoney Latam\u003C\u002Fa> – PayUmoney payment gateway for Easy Digital Downloads\u003C\u002Fp>\n\u003Ch4>Suggestions \u002F Feature Request\u003C\u002Fh4>\n\u003Cp>If you have suggestions or a new feature request, feel free to get in touch with us via the contact form on our website \u003Ca href=\"https:\u002F\u002Fwpallsupport.com\u002Fcontact-us\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fp>\n","This plugin will allow you to hide the WordPress admin toolbar from the frontend for all users and based on the user roles.",1084,"2021-10-23T10:00:00.000Z","5.8.13","4.0","5.2.4",[108,109,110,111,112],"admin-bar","disable-admin-bar","hide-admin-bar","hide-admin-bar-by-roles","wp-admin-bar-hide","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhide-admin-bar-by-wp-all-support.1.0.3.zip",{"slug":115,"name":116,"version":76,"author":117,"author_profile":118,"description":119,"short_description":120,"active_installs":11,"downloaded":121,"rating":11,"num_ratings":11,"last_updated":122,"tested_up_to":85,"requires_at_least":123,"requires_php":68,"tags":124,"homepage":130,"download_link":131,"security_score":132,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"quick-disabler","Quick Disabler","Nayon Islam","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebnayon\u002F","\u003Cp>\u003Cstrong>Quick Plugin Disabler\u003C\u002Fstrong> helps you instantly disable all active plugins except itself with a single click.\u003Cbr \u002F>\nNeed to find out which plugin is breaking your site? This tool is built for exactly that.\u003Cbr \u002F>\nUse the \u003Cstrong>Re-enable Plugins\u003C\u002Fstrong> button to bring everything back—no need to reactivate plugins one by one.\u003C\u002Fp>\n\u003Cp>✅ Perfect for:\u003Cbr \u002F>\n– Troubleshooting plugin conflicts\u003Cbr \u002F>\n– Debugging white screen issues\u003Cbr \u002F>\n– Simplifying your dev workflow\u003C\u002Fp>\n\u003Ch3>Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Disable all active plugins (except this one)\u003C\u002Fli>\n\u003Cli>Re-enable them all again\u003C\u002Fli>\n\u003Cli>Powered by AJAX — no page reloads\u003C\u002Fli>\n\u003Cli>Works on multisite\u003C\u002Fli>\n\u003Cli>Lightweight & admin-only access\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Author Information\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Author Name\u003C\u002Fstrong>: Nayon Islam\u003Cbr \u002F>\n\u003Cstrong>Email\u003C\u002Fstrong>: nayonislam105@gmail.com\u003Cbr \u002F>\n\u003Cstrong>Author URL\u003C\u002Fstrong>: https:\u002F\u002Fprofiles.wordpress.org\u002Fwebnayon\u003C\u002Fp>\n","Easily disable all active plugins—except this one—with one click. Re-enable them anytime using AJAX. Perfect for debugging and troubleshooting.",254,"2025-03-29T08:50:00.000Z","5.5",[125,126,127,128,129],"admin-tools","deactivate-all","debug","disable-plugins","troubleshoot","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fquick-disabler\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fquick-disabler.zip",92,{"attackSurface":134,"codeSignals":140,"taintFlows":147,"riskAssessment":148,"analyzedAt":155},{"hooks":135,"ajaxHandlers":136,"restRoutes":137,"shortcodes":138,"cronEvents":139,"entryPointCount":11,"unprotectedCount":11},[],[],[],[],[],{"dangerousFunctions":141,"sqlUsage":142,"outputEscaping":144,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":146},[],{"prepared":11,"raw":11,"locations":143},[],{"escaped":11,"rawEcho":11,"locations":145},[],[],[],{"summary":149,"deductions":150},"The static analysis of wp-hide-add-new-theme v1.0 reveals a plugin with a seemingly minimal attack surface, as it reports zero AJAX handlers, REST API routes, shortcodes, or cron events.  Furthermore, the code signals indicate no dangerous functions, all SQL queries use prepared statements, and all outputs are properly escaped, which are positive security practices. The absence of external HTTP requests and file operations also contributes to a reduced risk profile. The plugin also has no recorded vulnerability history, suggesting a history of stability or limited exposure.\n\nHowever, the analysis also highlights a significant concern: a complete lack of nonce checks and capability checks. This indicates that any potential entry points, even if currently non-existent or implicitly handled by WordPress core, are not being secured at the plugin level. While the current attack surface is reported as zero, this absence of crucial security checks presents a latent risk. If future updates introduce any form of user-interactive functionality without implementing these checks, it could lead to significant vulnerabilities.\n\nIn conclusion, wp-hide-add-new-theme v1.0 demonstrates good practices in its current implementation regarding SQL and output handling. However, the complete omission of nonce and capability checks is a notable weakness. While the plugin currently presents a low risk due to its limited attack surface, this architectural oversight means it is not inherently secure and could become vulnerable with future modifications or if WordPress core behavior changes affect its implicit handling.",[151,153],{"reason":152,"points":44},"Missing nonce checks",{"reason":154,"points":44},"Missing capability checks","2026-03-17T06:39:42.439Z",{"wat":157,"direct":163},{"assetPaths":158,"generatorPatterns":160,"scriptPaths":161,"versionParams":162},[159],"\u002Fwp-content\u002Fplugins\u002Fwp-hide-add-new-theme\u002F",[],[],[],{"cssClasses":164,"htmlComments":165,"htmlAttributes":166,"restEndpoints":167,"jsGlobals":168,"shortcodeOutput":169},[],[],[],[],[],[]]