Controlled Admin Access

Explore Controlled Admin Access vulnerabilities across all versions. Currently tracking 2 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSCritical
9.9/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Controlled Admin Access vulnerabilities before they are exploited.

Vulnerability Records

2 records
Controlled Admin Access banner
Latestv2.1.2

Controlled Admin Access

Waseem Senjer

Author

Waseem Senjer

4.8(44)
96/100
Last Updated
2025-12-08 (8mo ago)
Active Installs
10,000+
Downloads
222,855
Requires WP
4.0+
Requires PHP
7.0+
Tested up to
WP 6.9.5
Created
2015-12-06 (11y ago)

Give a temporary limited admin. access to themes designers, plugins developers and support agents. The plugin is simple and clean, it helps the administrator to create a user with a temporary access and choose which pages in your admin area which you don’t want the user to access. send the details to the user and when he finished his task, you can easily deactivate the account and activate it later. Upgrade to Pro Now Documentation Features Menu Filter The plugin will allow you to select admin menu items that you want to restrict for the created admin. Not only the plugin will hide the menu item from the admin but it also will block the page if they access it in some other way. Expiration Time You may don’t want to give access indefinitely, the plugin allows you to set an expiration time for the restricted admin account. After the account expires, the account will no longer be able to login into the admin dashboard. Moreover, you can always extend the expiry time or change it. Hide Admin Bar WordPress offers an admin bar to provide quick access to some pages or to perform some actions. Using the plugin, you can hide the admin bar links at the top of the page will be hidden in both the frontend and admin areas. Disable Access You can always disable the restricted admin account at any time. For example, if you gave a developer access to fix a bug or install a theme, when they finish the task you can disable their account. This will block login in using the account but it will retain the account’s information in case you wanted to give them access in the future. Pro Features Plugins Internal Pages Take more control and restrict access to plugins’ internal pages. For example, you would like to give access to the WooCommerce Settings page, but you do not want the account to see the Payments Gateways tab. Currently, the plugin supports WooCommerce, Easy Digital Downloads and BuddyPress. In the future, we will add support for more plugins. No Password Login Add some convenience when sending access to the user, you can generate a secure login URL for the user, and the user will use the link to login into the dashboard without the need for a password. You can also disable login by a password for restricted admins, this will restrict the admin from login in using a password or sending a reset password email. Activity Log Keep track of what restricted admins have done while logged in, the plugin will log more than 20 actions such as activating/deactivating/deleting a plugin, switching a theme, deleting a theme, exporting data, publishing/deleting a post and uploading a file. Remote Logout At any given time, you can force logging out any restricted admin if you no longer need them logged in the admin dashboard. This action will log them out on all logged-in devices and locations.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C