Does MultiWeather have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is MultiWeather compatible with WordPress 6.9.4?

According to WordPress.org data, MultiWeather 1.1.0 has been tested up to WordPress 6.9.4. Check the plugin's changelog for the latest compatibility information.

Is MultiWeather compatible with PHP 7.4+?

MultiWeather requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is MultiWeather updated?

MultiWeather was last updated on Jan 10, 2026. Frequent updates are generally a positive security signal.

What is MultiWeather's security score?

MultiWeather has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

MultiWeather Security & Risk Analysis

wordpress.org/plugins/multiweather

Responsive weather, tide, and marine cards for WordPress — including moon phase, marine data, and tide visuals.

0 active installs v1.1.0 PHP 7.4+ WP 5.8+ Updated Jan 10, 2026

forecastmarinetemperaturetidesweather

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is MultiWeather Safe to Use in 2026?

Generally Safe

Score 100/100

MultiWeather has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago

Risk Assessment

The 'multiweather' plugin v1.1.0 exhibits a generally strong security posture, with excellent practices in SQL query sanitization and output escaping. The static analysis shows that all SQL queries utilize prepared statements, and all output is properly escaped, significantly reducing the risk of common injection and XSS vulnerabilities. Furthermore, the plugin has no recorded history of known vulnerabilities (CVEs), which suggests a diligent approach to security over time. The absence of critical or high-severity taint flows further reinforces this positive assessment.

Key Concerns

Unprotected REST API endpoint
Bundled outdated Freemius library

Vulnerabilities

None known

MultiWeather Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

MultiWeather Release Timeline

v1.1.0Current

v1.0.9

v1.0.8

v1.0.7

Code Analysis

Analyzed Apr 16, 2026

MultiWeather Code Analysis

Dangerous Functions

Raw SQL Queries

2 prepared

Unescaped Output

1039 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Freemius1.0

SQL Query Safety

100% prepared2 total queries

Output Escaping

100% escaped1040 total outputs

Attack Surface

1 unprotected

MultiWeather Attack Surface

Entry Points2

Unprotected1

REST API Routes 1

GET/wp-json/mwpl/tzmultiweather.php:99

Shortcodes 1

[mwpl_weather_card] multiweather.php:244

WordPress Hooks 10

actionwp_enqueue_scriptsinc/animated-icons.php:15

actionwp_footerinc/animated-icons.php:155

actionadmin_initinc/settings-page.php:100

actionadmin_menuinc/settings-page.php:112

actionrest_api_initmultiweather.php:97

actionwp_enqueue_scriptsmultiweather.php:137

actionwp_enqueue_scriptsmultiweather.php:146

actionwp_enqueue_scriptsmultiweather.php:173

actionwp_enqueue_scriptsmultiweather.php:182

actionmwpl_reset_api_countmultiweather.php:346

Scheduled Events 1

mwpl_reset_api_count

Maintenance & Trust

MultiWeather Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedJan 10, 2026

PHP min version7.4

Downloads249

Community Trust

Rating0/100

Number of ratings0

Active installs0

Alternatives

MultiWeather Alternatives

Location Weather – WordPress Weather Forecast, AQI, Temperature and Weather Widget

location-weather

100

Customizable WordPress Weather Forecast plugin to display Current Temperature, Hourly & Daily Forecasts, up to 16-Day, Air Quality, & Live Weather Map

10K 1 CVE

Weather Atlas Widget

weather-atlas

The Weather Widget with the Most Active Installations. Highly customizable, simple & beautiful. Detailed current weather, hourly & daily forecasts

9K 2 CVEs

wp-forecast

wp-forecast is a highly customizable plugin for wordpress, showing weather-data from open-meteo.com and/or openweathermap.com.

5K 2 CVEs

Ventus – Weather Map Widget & Shortcode

weather-map-widget

Easily customise and embed the windy.com widget as a native WordPress widget or shortcode.

3K No CVEs

Weather Widget Pro

weather-in-any-city-widget

Weather Widget Pro provides a complete weather forecast for any location around the world.

1K 1 CVE

Developer Profile

MultiWeather Developer Profile

CaphLabs

7 plugins · 170 total installs

trust score

Avg Security Score

99/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect MultiWeather

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/multiweather/weather-icons/css/weather-icons.min.css/wp-content/plugins/multiweather/assets/css/animate.min.css

Script Paths

/wp-content/plugins/multiweather/js/init-weather-zones.js/wp-content/plugins/multiweather/assets/js/mwpl-front.js

Version Parameters

multiweather/js/init-weather-zones.js?ver=multiweather/assets/js/mwpl-front.js?ver=multiweather/weather-icons/css/weather-icons.min.css?ver=multiweather/assets/css/animate.min.css?ver=

HTML / DOM Fingerprints

CSS Classes

mwpl-weather-card

HTML Comments

+17 more

Data Attributes

data-latdata-londata-unitsdata-card

JS Globals

window.mwpl_fsmwpl_fs

REST Endpoints

/wp-json/mwpl/tz

Shortcode Output

[mwpl_weather_cardclass="mwpl-weather-card"

FAQ