TSW lets your users know how much traffic you have on your blog. It counts pages visited, hits and unique IPs on your blog and shows it in a widget.
| Code | Message | Location | Category | |
|---|---|---|---|---|
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$options["wp_tsw_WidgetTitle"]'. | 218:22 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$after_title'. | 219:8 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$after_widget'. | 221:8 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$options['wp_tsw_WidgetText_LastWeek']'. | 75:171 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$options['wp_tsw_WidgetText_LastMonth']'. | 79:175 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$options['wp_tsw_WidgetText_Online']'. | 83:164 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$options['wp_tsw_WidgetTitle']'. | 55:148 | Security |
| ERROR | WordPress.Security.EscapeOutput.OutputNotEscaped | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$options['wp_tsw_WidgetText_Visitors']'. | 59:165 | Security |
| ERROR | PluginCheck.Security.DirectDB.UnescapedDBParameter | Unescaped parameter $sql used in $wpdb->get_var($sql)\n$sql assigned unsafely at line 148:\n $sql .= ' AND IS_BOT <> 1'\n$sql assigned unsafely at line 145:\n $sql .= ' AND IS_HIT = 1 '\n$sql assigned unsafely at line 142:\n $sql = "SELECT COUNT(".($unique ? "DISTINCT IP" : "*").") FROM $table_name where Time > ".$stime\n$options['wp_tsw_WidgetText_bots_filter'] used without escaping.\n$table_name assigned unsafely at line 138:\n $table_name = $wpdb->prefix . "tsw_log"\n$options assigned unsafely at line 139:\n $options = get_tsw_options() | 150:36 | Security |
| ERROR | WordPress.DB.PreparedSQL.NotPrepared | Use placeholders and $wpdb->prepare(); found $sql | 150:44 | Security |
| 15.11.2025, 20:16:14 | 11s | 55 | 65 | 107 |