Any Plugin Can Edit the WordPress Add New Screen

Any plugin on your site can rewrite the Plugins to Add New results before you see them. Core hands the list to a filter, and a filter has no capability check, so anything already installed gets to edit the answer. I scanned all 63,619 free plugins and roughly 13,000 themes for code that touches it. 2,385 register one of those hooks, and most of it is harmless self-promotion. Six remove a named…