Does Button Widget have any unpatched vulnerabilities?

No. All known vulnerabilities in Button Widget have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Button Widget compatible with WordPress 5.6.17?

According to WordPress.org data, Button Widget 1.2.2 has been tested up to WordPress 5.6.17. Check the plugin's changelog for the latest compatibility information.

Is Button Widget compatible with PHP 7.2.0+?

Button Widget requires PHP 7.2.0 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Button Widget updated?

Button Widget was last updated on Dec 22, 2020. Frequent updates are generally a positive security signal.

What is Button Widget's security score?

Button Widget has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Button Widget Security & Risk Analysis

wordpress.org/plugins/button-widget

A simple customizable button widget for your sidebars.

200 active installs v1.2.2 PHP 7.2.0+ WP 5.0+ Updated Dec 22, 2020

buttoncall-to-actioncalloutwidgetwordpress-button-plugin

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Button Widget Safe to Use in 2026?

Generally Safe

Score 85/100

Button Widget has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5yr ago

Risk Assessment

The "button-widget" v1.2.2 plugin exhibits a strong security posture based on the provided static analysis. The complete absence of identified attack surface points such as AJAX handlers, REST API routes, shortcodes, and cron events suggests a minimal interaction with user input or system functions that could be exploited. Furthermore, the code analysis shows no dangerous functions, no raw SQL queries, and a very high percentage of properly escaped output, indicating good defensive coding practices. The lack of any recorded vulnerabilities in its history further reinforces this positive assessment.

Vulnerabilities

None known

Button Widget Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Button Widget Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

74 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

90% escaped82 total outputs

Attack Surface

Button Widget Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 3

actioninitbutton-widget.php:101

actionadmin_enqueue_scriptsbutton-widget.php:102

actionwidgets_initbutton-widget.php:103

Maintenance & Trust

Button Widget Maintenance & Trust

Maintenance Signals

WordPress version tested5.6.17

Last updatedDec 22, 2020

PHP min version7.2.0

Downloads3K

Community Trust

Rating100/100

Number of ratings1

Active installs200

Alternatives

Button Widget Alternatives

OrbitCarrot CTA Widget Manager

cta-widget-manager

The easiest way to create Call to Actions as widgets on your Wordpress site. Customize your own CTA style or use pre-designed ones.

10 No CVEs

Social Icons Widget & Block – Social Media Icons & Share Buttons

social-icons-widget-by-wpzoom

Social media icons plugin for WordPress - Add 400+ social icons and share buttons. Gutenberg block, widget & Elementor support. GDPR compliant.

100K 3 CVEs

Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress

contact-form-plugin

The most powerful and user-friendly WordPress contact form plugin. Create beautiful contact forms, widgets and pages using shortcodes.

30K 1 unpatched

Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist

bit-assist

Floating sticky chat button for WhatsApp Chat, Facebook Messenger, Telegram, Instagram, SMS, Call, Discord chat, TikTok, Line & 30+ channels

10K 7 CVEs

Mobile Contact Bar

mobile-contact-bar

Allow your visitors to contact you via mobile phones, or access your site's pages instantly.

10K 1 CVE

Developer Profile

Button Widget Developer Profile

Mahdi Yazdani

7 plugins · 590 total installs

trust score

Avg Security Score

87/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Button Widget

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/button-widget/assets/css/style.css/wp-content/plugins/button-widget/assets/js/script.js

Version Parameters

button-widget/style.css?ver=button-widget/script.js?ver=

HTML / DOM Fingerprints

CSS Classes

button-widget-input-wrap

Data Attributes

data-button-widget-id

JS Globals

Button_Widget_Register

FAQ