← Back to Leaderboard
An enhanced version of the text widget that supports Text, HTML, CSS, JavaScript, Flash, Shortcodes and PHP with linkable widget title.
64
Score
104
Errors
36
Warnings
40K
Installs
Security100
Repo31
General6
Performance3
Accessibility0
Top Issues by Category
Issues organized by category, type, and rule family
Issues Details
140 issues found in latest scan
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$notice'. | 3:56 | Security |
| ERROR | Generic.PHP.ForbiddenFunctions.Found | The use of function eval() is forbidden | 68:5 | — |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$before_widget'. | 76:31 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$title'. | 82:30 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$before_title'. | 82:39 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$title'. | 82:55 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$after_title'. | 82:64 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wpautop'. | 88:32 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$text'. | 88:49 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$after_widget'. | 90:42 | Security |
140 total row(s)
Scan History
1 scan recorded
| 13.11.2025, 03:58:28 | 13s | 64 | 104 | 36 |
1 total row(s)
Report an issue
Tell us if something in this report looks wrong or if you need a deeper audit for Enhanced Text Widget. We read every submission and typically reply within a day.