sudowp

Security auditor for the WordPress Abilities API. Scans registered abilities for permission misconfigurations, input schema gaps, and REST exposure risks.

A security-hardened fork of "Simply Show Hooks". Replaces the compromised original (CVE-2024-6297) and patches unlisted Cross-Site Scripting (XSS) vulnerabilities.

A security-patched fork of the legacy ClickFunnels Classic WordPress plugin. Fixes critical Stored XSS vulnerabilities (CVE-2022-4782) while maintaining original API functionality for existing funnels.

A security-hardened fork of the abandoned "PostGallery" WordPress plugin. Fixes critical Arbitrary File Upload (CVE-2025-13543) and Guest Access vulnerabilities.

A security-hardened, community-maintained rescue of the All-in-One Event Calendar. Fixes WordPress 6.7 compatibility issues (textdomain errors) and ensures PHP 8.2 stability after the original plugin was discontinued by the vendor.

Search and install patched plugins/themes directly from the SudoWP GitHub Organization.

Secure fork of Startklar Elementor Addons. Patched CVE-2024-5153 & File Upload vulnerabilities.

A secure, modernized fork of the Advanced Tabs Block plugin. Features PHP 8.2+ strict typing, security hardening, and a clean OOP architecture.

Organization configuration and profile

A security-hardened WordPress debug log viewer. View, search, and manage wp-content/debug.log from the admin dashboard with Debug Bar integration.