iPhods iTunes Top Products Widget Security & Risk Analysis

wordpress.org/plugins/iphods-itunes-top-products-rss-widget

This plugin is a simple plugin to generate widgets highlighting top products available on Apple iTunes Store.

10 active installs v8.17 PHP + WP 3.2.1+ Updated Aug 17, 2013
appleitunesrsswdiget
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is iPhods iTunes Top Products Widget Safe to Use in 2026?

Generally Safe

Score 85/100

iPhods iTunes Top Products Widget has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 12yr ago
Risk Assessment

The "iphods-itunes-top-products-rss-widget" plugin version 8.17 exhibits a mixed security posture. On the positive side, the plugin demonstrates good practices by not using dangerous functions, performing all SQL queries using prepared statements, and having no known unpatched vulnerabilities. The absence of file operations and external HTTP requests (though there are 3 detected, which warrants a closer look) also contributes to a generally secure baseline. However, significant concerns arise from the lack of nonce checks and a very low percentage of properly escaped output. The taint analysis revealing two flows with unsanitized paths, even if not classified as critical or high severity, suggests potential avenues for unexpected behavior or data manipulation.

Key Concerns

  • Low output escaping percentage
  • No nonce checks detected
  • Taint flows with unsanitized paths
  • External HTTP requests detected
Vulnerabilities
None known

iPhods iTunes Top Products Widget Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

iPhods iTunes Top Products Widget Release Timeline

v8.16
v8.15
v8.14
v8.13
v8.12
Code Analysis
Analyzed Apr 16, 2026

iPhods iTunes Top Products Widget Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
19
4 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
3
Bundled Libraries
0

Output Escaping

17% escaped23 total outputs
Data Flows · Security
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
widget (iphods_top_widget.php:49)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

iPhods iTunes Top Products Widget Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[iphods] iphods_shortcode.php:8
WordPress Hooks 7
actionwidgets_initiphods.php:39
actionwp_enqueue_scriptsiphods.php:43
actionadmin_menuiphods_settings.php:16
actionadmin_initiphods_settings.php:17
filterplugin_action_linksiphods_settings.php:20
filtermce_external_pluginsiphods_shortcode.php:16
filtermce_buttonsiphods_shortcode.php:19
Maintenance & Trust

iPhods iTunes Top Products Widget Maintenance & Trust

Maintenance Signals

WordPress version tested3.6.5
Last updatedAug 17, 2013
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

iPhods iTunes Top Products Widget Developer Profile

bradmkjr

4 plugins · 40 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect iPhods iTunes Top Products Widget

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/iphods-itunes-top-products-rss-widget/css/iphods.css/wp-content/plugins/iphods-itunes-top-products-rss-widget/js/iphods.js
Script Paths
/wp-content/plugins/iphods-itunes-top-products-rss-widget/js/iphods.js
Version Parameters
iphods-itunes-top-products-rss-widget/css/iphods.css?ver=iphods-itunes-top-products-rss-widget/js/iphods.js?ver=

HTML / DOM Fingerprints

CSS Classes
iphods-item-listcolumns-gridlistiphods-details
Data Attributes
onClicktrackOutboundLink(this, 'iPhods Widget', '
JS Globals
trackOutboundLink
Shortcode Output
<li class="<a href="title="Download Now" >
FAQ

Frequently Asked Questions about iPhods iTunes Top Products Widget