Daily Horoscopes Widget Security & Risk Analysis

wordpress.org/plugins/daily-horoscope-widget

A sidebar widget to display daily horoscopes from DianaGarland.com.

10 active installs v1.0.1 PHP + WP 3.0.1+ Updated Dec 14, 2013
dailyhoroscopehoroscopeswidgetzodiac
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Daily Horoscopes Widget Safe to Use in 2026?

Generally Safe

Score 85/100

Daily Horoscopes Widget has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 12yr ago
Risk Assessment

The 'daily-horoscope-widget' plugin v1.0.1 exhibits a mixed security posture. On the positive side, the plugin has no recorded vulnerabilities (CVEs) and demonstrates good practices regarding SQL queries, all of which are properly prepared. Furthermore, the absence of file operations and external HTTP requests reduces potential attack vectors. However, significant concerns arise from the static analysis. The presence of the `create_function` is a red flag as it can be exploited for arbitrary code execution in certain contexts. The extremely low percentage of properly escaped output (12%) is a critical weakness, indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities, allowing attackers to inject malicious scripts into user-facing content. The lack of any identified entry points in the static analysis might suggest a very limited scope or an incomplete analysis, but as presented, it contributes to the uncertainty.

Key Concerns

  • Use of dangerous function: create_function
  • Low percentage of properly escaped output
  • No nonce checks
  • No capability checks
Vulnerabilities
None known

Daily Horoscopes Widget Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Daily Horoscopes Widget Release Timeline

v1.0
Code Analysis
Analyzed Apr 16, 2026

Daily Horoscopes Widget Code Analysis

Dangerous Functions
1
Raw SQL Queries
0
0 prepared
Unescaped Output
82
11 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Dangerous Functions Found

create_functionadd_action( 'widgets_init', create_function( '', 'register_widget("Daily_Horoscopes_Widget");' ) );daily_horoscopes_widget.php:426

Output Escaping

12% escaped93 total outputs
Attack Surface

Daily Horoscopes Widget Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actionwidgets_initdaily_horoscopes_widget.php:426
Maintenance & Trust

Daily Horoscopes Widget Maintenance & Trust

Maintenance Signals

WordPress version tested3.8.0
Last updatedDec 14, 2013
PHP min version
Downloads7K

Community Trust

Rating100/100
Number of ratings2
Active installs10
Developer Profile

Daily Horoscopes Widget Developer Profile

DuncanMarshall

3 plugins · 30 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Daily Horoscopes Widget

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Daily Horoscopes Widget