Twitter Follow Button Security & Risk Analysis

wordpress.org/plugins/twitter-follow-button-plugin

With this plugin, you can embed Twitter Follow Button to let your visitor follow you instantly by just clicking on the button.

40 active installs v1.0 PHP + WP 2.7+ Updated Jun 3, 2011
facebook-badgefacebook-liketwittertwitter-followtwitter-follow-button
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Twitter Follow Button Safe to Use in 2026?

Generally Safe

Score 85/100

Twitter Follow Button has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 14yr ago
Risk Assessment

The "twitter-follow-button-plugin" v1.0 plugin exhibits a seemingly strong security posture at first glance due to the absence of identified vulnerabilities in its history and a clean taint analysis. The static analysis also indicates no dangerous functions, no raw SQL queries, and no file operations, which are positive indicators. However, a critical concern arises from the complete lack of output escaping for all identified output points. This means that any data rendered by the plugin could potentially be injected with malicious code, leading to cross-site scripting (XSS) vulnerabilities, even without a large attack surface. The absence of any capability checks or nonce checks also suggests a lack of robust authorization and integrity mechanisms for its potential (though currently not identified) entry points. While the plugin has no known CVEs, this can be attributed to its apparent simplicity or a lack of prior deep security audits. The lack of identified entry points and the absence of known vulnerabilities might give a false sense of security. The absence of output escaping is a significant weakness that could be easily exploited if any user-supplied data is ever rendered directly. Therefore, while the plugin is not demonstrably vulnerable based on the provided data, the unescaped output presents a notable risk.

Key Concerns

  • 0% output escaping
  • 0 capability checks
  • 0 nonce checks
Vulnerabilities
None known

Twitter Follow Button Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Twitter Follow Button Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
5
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped5 total outputs
Attack Surface

Twitter Follow Button Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
filterthe_contenttwitter-follow-button-plugin.php:77
actionadmin_menutwitter-follow-button-plugin.php:238
actionadmin_inittwitter-follow-button-plugin.php:239
Maintenance & Trust

Twitter Follow Button Maintenance & Trust

Maintenance Signals

WordPress version tested3.1.4
Last updatedJun 3, 2011
PHP min version
Downloads13K

Community Trust

Rating0/100
Number of ratings0
Active installs40
Developer Profile

Twitter Follow Button Developer Profile

cmsvoteup

3 plugins · 60 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Twitter Follow Button

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/twitter-follow-button-plugin/style.css/wp-content/plugins/twitter-follow-button-plugin/script.js
Script Paths
http://platform.twitter.com/widgets.js
Version Parameters
twitter-follow-button-plugin/style.css?ver=twitter-follow-button-plugin/script.js?ver=

HTML / DOM Fingerprints

CSS Classes
twitter-follow-button
HTML Comments
<!-- About this Plugin: --><!-- Vote Up your Wordpress Website --><!-- Vote or Download Other plugins --><!-- Note: You can also use this tag add_twitter_follow_button(); for manually insert button to any of your post item. -->
Data Attributes
data-show-countdata-buttondata-text-colordata-link-colordata-langposition_button+2 more
JS Globals
twitter_follow_button_options
Shortcode Output
<a href="http://twitter.com/cmsvoteup" class="twitter-follow-button" data-show-count="true" data-button="blue" data-text-color="#800080" data-link-color="#800080" data-lang="en">Follow @cmsvoteup</a><script src="http://platform.twitter.com/widgets.js" type="text/javascript"></script><a href="http://cmsvoteup.com/category/wordpress-plugins/" title="Get Twitter Follow Button Wordpress Plugin" target="_blank"><img src="http://www.cmsvoteup.com/images/power_by_2x2.gif" border="0"/></a>
FAQ

Frequently Asked Questions about Twitter Follow Button