TCW lets your users know how much traffic you have on your blog. It counts pages visited, hits and unique IPs on your blog and shows it in a widget.
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$before_title'. | 203:8 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$options["wp_wtc_WidgetTitle"]'. | 203:22 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$after_title'. | 204:8 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$after_widget'. | 206:8 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$options['wp_wtc_WidgetText_LastWeek']'. | 61:171 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$options['wp_wtc_WidgetText_LastMonth']'. | 65:175 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$options['wp_wtc_WidgetText_Online']'. | 69:164 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$options['wp_wtc_WidgetTitle']'. | 41:148 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$options['wp_wtc_WidgetText_Visitors']'. | 45:165 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $sql used in $wpdb->get_var($sql)\n$sql assigned unsafely at line 134:\n $sql .= ' AND IS_BOT <> 1'\n$sql assigned unsafely at line 131:\n $sql .= ' AND IS_HIT = 1 '\n$sql assigned unsafely at line 128:\n $sql = "SELECT COUNT(".($unique ? "DISTINCT IP" : "*").") FROM $table_name where Time > ".$stime\n$options['wp_wtc_WidgetText_bots_filter'] used without escaping.\n$table_name assigned unsafely at line 124:\n $table_name = $wpdb->prefix . "wtc_log"\n$options assigned unsafely at line 125:\n $options = get_wtc_options() | 136:36 | Security |
| 15.11.2025, 20:34:51 | 9s | 55 | 67 | 107 |