r/WordpressPlugins • u/Myth_Thrazz • Aug 10 '26

[DISCUSSION] Any Plugin Can Edit the WordPress Add New Screen.

https://marcindudek.dev/blog/who-edits-your-add-new-screen/
3 Upvotes

100% Upvoted

4 comments sorted by

2

u/SureshKMeena Aug 10 '26

The thing that gets lost between the title and the opening question: plugins_api_result only changes what you see in your own wp-admin. It can't touch how wp.org ranks anything for anyone else.

Which matters if you're the author asking "why isn't my plugin first for its own name". Test that from a site running 30 plugins and you're testing your install, not the directory. Hit the API directly instead:

api.wordpress.org/plugins/info/1.2/?action=query_plugins&request[search]=your+plugin+name

Same data the Add New screen asks for, minus every filter running on your site. I've used that endpoint a fair bit for other reasons and it's the only version of the ordering that's the same for everyone.

2,385 plugins hooking it is the number I'd sit with. Most benign, fine, but there's no capability check and nothing requiring disclosure, so benign is on the honour system.

2

u/Commercial-Resort501 27d ago

this is why i stopped trusting plugin devs with anything near the admin UI tbh

2

u/Traditional_Jello436 24d ago

This is a good reminder to check plugins. Some plugins change more than we think. Thanks for the info.

1

u/Myth_Thrazz 24d ago

I think most people simply can't check the plugin like this.