Does CTR Widget have any unpatched vulnerabilities?

No. All known vulnerabilities in CTR Widget have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is CTR Widget compatible with WordPress 3.5.2?

According to WordPress.org data, CTR Widget 1.0 has been tested up to WordPress 3.5.2. Check the plugin's changelog for the latest compatibility information.

How often is CTR Widget updated?

CTR Widget was last updated on Mar 25, 2013. Frequent updates are generally a positive security signal.

What is CTR Widget's security score?

CTR Widget has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

CTR Widget Security & Risk Analysis

wordpress.org/plugins/ctr-widget

Increases the click through rate for most affiliate offers by as much as 50% by installing a floating widget aka cloud box.

10 active installs v1.0 PHP + WP 3.3+ Updated Mar 25, 2013

affiliate-marketingclick-throughmarketing

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is CTR Widget Safe to Use in 2026?

Generally Safe

Score 85/100

CTR Widget has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 13yr ago

Risk Assessment

The "ctr-widget" plugin v1.0 presents a generally good security posture based on the static analysis. The plugin boasts a clean attack surface with no discernible entry points identified through AJAX, REST API, shortcodes, or cron events. Furthermore, the code exhibits strong practices by exclusively using prepared statements for SQL queries and a single capability check, indicating an awareness of secure coding principles. The absence of dangerous functions, file operations, external HTTP requests, and taint flows also contributes positively to its security profile.

Key Concerns

Output escaping is completely missing

Vulnerabilities

None known

CTR Widget Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

CTR Widget Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

0 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

0% escaped12 total outputs

Attack Surface

CTR Widget Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 9

actionadmin_menuclasses\admin.php:12

actionadmin_initclasses\admin.php:22

actionplugins_loadedclasses\widget.php:13

actionwidgets_initclasses\widget.php:14

actionshutdownclasses\widget.php:15

actionwp_headclasses\widget.php:16

actioninitctr-widget.php:22

actionwp_enqueue_scriptsctr-widget.php:31

filterplugin_action_linksctr-widget.php:34

Maintenance & Trust

CTR Widget Maintenance & Trust

Maintenance Signals

WordPress version tested3.5.2

Last updatedMar 25, 2013

PHP min version

Downloads2K

Community Trust

Rating0/100

Number of ratings0

Active installs10

Alternatives

CTR Widget Alternatives

AffiliateX – Amazon Affiliate Plugin

affiliatex

AffiliateX is the best WordPress Amazon Affiliate Plugin. Create professional affiliate websites with customizable WordPress Amazon Affiliate Blocks.

10K 3 CVEs

Content Egg – Affiliate Product Importer & Price Comparison

content-egg

Import affiliate products, compare prices, sync to WooCommerce, and auto-generate SEO content with AI — all in one toolkit.

10K 3 CVEs

Affiliates Manager

affiliates-manager

Affiliates Manager plugin can help you manage an affiliate marketing program to drive more traffic and more sales to your site.

9K 12 CVEs

YITH WooCommerce Affiliates

yith-woocommerce-affiliates

YITH WooCommerce Affiliates allows you to create affiliate profiles and grant your affiliates earnings each time someone purchases from their link.

7K 1 CVE

Goaffpro Affiliate Marketing

goaffpro

100

The complete affiliate marketing solution for your WordPress and WooCommerce website.

5K No CVEs

Developer Profile

CTR Widget Developer Profile

Jon Gillham

2 plugins · 310 total installs

trust score

Avg Security Score

85/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect CTR Widget

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/ctr-widget/js/ctr-widget.js

Script Paths