My Extreme Twitter Security & Risk Analysis

wordpress.org/plugins/my-extreme-twitter

This plugin will add an widget to use Twitter's tweet.

10 active installs v3.0.1 PHP + WP 3.2+ Updated Mar 15, 2014
api-1-1socialtwitter
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is My Extreme Twitter Safe to Use in 2026?

Generally Safe

Score 85/100

My Extreme Twitter has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 12yr ago
Risk Assessment

The "my-extreme-twitter" plugin v3.0.1 presents a concerning security posture due to significant weaknesses in output sanitization, despite a lack of identified critical vulnerabilities in static analysis and a clean vulnerability history. The plugin exhibits 0% proper output escaping across 26 output instances. This indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities, where malicious scripts could be injected and executed in users' browsers, potentially leading to session hijacking, credential theft, or defacement. The absence of any identified CVEs and a clean vulnerability history are positive indicators, suggesting the developers may be diligent in addressing past issues or that the plugin's functionality is limited, thus not attracting attacker attention. However, the pervasive lack of output escaping is a fundamental security flaw that significantly elevates risk, overshadowing the otherwise clean analysis.

Key Concerns

  • Output escaping is not properly handled
Vulnerabilities
None known

My Extreme Twitter Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

My Extreme Twitter Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
26
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped26 total outputs
Attack Surface

My Extreme Twitter Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actionwidgets_initmy_extreme_twitter.php:11
Maintenance & Trust

My Extreme Twitter Maintenance & Trust

Maintenance Signals

WordPress version tested3.7.41
Last updatedMar 15, 2014
PHP min version
Downloads3K

Community Trust

Rating100/100
Number of ratings2
Active installs10
Developer Profile

My Extreme Twitter Developer Profile

h3mdsa

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect My Extreme Twitter

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Script Paths
/wp-content/plugins/my-extreme-twitter/widgets/

HTML / DOM Fingerprints

CSS Classes
my_extreme_twitter
Data Attributes
data-widget-iddata-screen-namedata-show-repliesdata-chromedata-tweet-limit
JS Globals
twitter-wjs
Shortcode Output
<a class="twitter-timeline"
FAQ

Frequently Asked Questions about My Extreme Twitter