Twitter Follow Button Widget Security & Risk Analysis

wordpress.org/plugins/twitter-follow-button-widget

Add multiple widget with twitter follow button.

30 active installs v1.0 PHP + WP 3.0.1+ Updated Jun 2, 2011
followsocialtwitter
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Twitter Follow Button Widget Safe to Use in 2026?

Generally Safe

Score 85/100

Twitter Follow Button Widget has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 14yr ago
Risk Assessment

The "twitter-follow-button-widget" v1.0 plugin exhibits a seemingly good security posture at first glance, with no recorded vulnerabilities, CVEs, or identified dangerous functions. The static analysis also reports zero AJAX handlers, REST API routes, shortcodes, or cron events, indicating a very small attack surface. Furthermore, there are no external HTTP requests or file operations, which are common vectors for attack. However, a significant concern arises from the static analysis indicating that 0% of the 23 total outputs are properly escaped. This absence of output escaping is a critical weakness that could allow for cross-site scripting (XSS) vulnerabilities if any dynamic data is rendered to the user without proper sanitization. Despite the lack of direct evidence of malicious code flows or SQL injection risks in the provided taint analysis, the unescaped output is a glaring omission in secure coding practices that cannot be overlooked.

Key Concerns

  • All output is unescaped
Vulnerabilities
None known

Twitter Follow Button Widget Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Twitter Follow Button Widget Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
23
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped23 total outputs
Attack Surface

Twitter Follow Button Widget Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actionwidgets_inittwitter-follow-button-widget.php:19
Maintenance & Trust

Twitter Follow Button Widget Maintenance & Trust

Maintenance Signals

WordPress version tested3.1.4
Last updatedJun 2, 2011
PHP min version
Downloads5K

Community Trust

Rating0/100
Number of ratings0
Active installs30
Developer Profile

Twitter Follow Button Widget Developer Profile

Marco Buttarini

4 plugins · 220 total installs

86
trust score
Avg Security Score
89/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Twitter Follow Button Widget

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Script Paths
http://platform.twitter.com/widgets.js

HTML / DOM Fingerprints

CSS Classes
twitter-follow-button
Data Attributes
data-buttondata-text-colordata-link-colordata-show-countdata-lang
FAQ

Frequently Asked Questions about Twitter Follow Button Widget