Plugin inspection:

WPMU DEV Dashboard

Use with caution

Last revised:

Confidence: Medium
This plugin has been given a short, targeted code review.

Before using this plugin, you should carefully consider these findings. Read more about this recommendation.

Findings

The plugin is linked to pay account details and uses WPMU DEV server/API extensively, so it is problematic to fully review the functionality.

The plugin aims to provide site management functionality linked to WPMU DEV accounts. It appears needed to unlock features of Pro WPMU DEV plugins. It potentially duplicates or overrides functionality provided by WP core or which may be already managed by hosting services. For example, it overrides default plugin management for WPMU DEV plugins. These functionalities should therefore be used with caution and in consultation with hosting providers and site administrators.

If specific services such as backups, analytics and SEO optimisation are activated, there will be data sharing with WPMU DEV. This may not be suitable depending on data protection and security requirements.

Other bundled functionalities include displaying backend system information such as PHP settings. Such information should be controlled for security reasons.

Reason for the 'Use with caution' result

The plugin is written such that its expected, ordinary use is likely to harm the site’s performance:

The dashboard is bundled with far-reaching functionalities that link to WPMU DEV and may override standard WP functionalities or hosting provided services. It therefore raises concerns around data security and confidentiality, and potential conflicts with existing site maintenance.

Failure criteria

  • Poor architecture
  • Failure to use available core functionality

Read more about our failure criteria.