Does Under The Weather have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is Under The Weather compatible with WordPress 6.9.4?

According to WordPress.org data, Under The Weather 2.7.1 has been tested up to WordPress 6.9.4. Check the plugin's changelog for the latest compatibility information.

Is Under The Weather compatible with PHP 7.2+?

Under The Weather requires PHP 7.2 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Under The Weather updated?

Under The Weather was last updated on Apr 3, 2026. Frequent updates are generally a positive security signal.

What is Under The Weather's security score?

Under The Weather has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Under The Weather Security & Risk Analysis

wordpress.org/plugins/under-the-weather

A lightweight and customizable weather widget, powered by the OpenWeather API, that caches and presents weather data with multiple style options.

20 active installs v2.7.1 PHP 7.2+ WP 5.0+ Updated Apr 3, 2026

blockcacheforecastopenweatherweather

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Under The Weather Safe to Use in 2026?

Generally Safe

Score 100/100

Under The Weather has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago

Risk Assessment

The "under-the-weather" plugin version 2.6.0 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of known CVEs, critical taint flows, and dangerous function usage indicates a well-developed and relatively secure codebase. Furthermore, the plugin demonstrates good practices by utilizing prepared statements for all SQL queries and implementing nonce and capability checks on its entry points, which significantly mitigates common attack vectors.

Key Concerns

High percentage of unescaped output
External HTTP request without clear sanitization context

Vulnerabilities

None known

Under The Weather Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

Under The Weather Release Timeline

v2.7.1Current

v2.7

v2.6

v2.5

v2.4.1

v2.4

v2.3

v2.2

v2.1

v2.0

v1.8

v1.7.7

v1.7.4

v1.7.1.1

v1.7

Code Analysis

Analyzed Mar 16, 2026

Under The Weather Code Analysis

Dangerous Functions

Raw SQL Queries

8 prepared

Unescaped Output

82 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

100% prepared8 total queries

Output Escaping

85% escaped97 total outputs

Attack Surface

Under The Weather Attack Surface

Entry Points4

Unprotected0

AJAX Handlers 2

authwp_ajax_utw_save_search_historyunder-the-weather.php:599

authwp_ajax_utw_get_search_historyunder-the-weather.php:640

REST API Routes 1

GET/wp-json/under-the-weather/v1/forecastunder-the-weather.php:735

Shortcodes 1

[under_the_weather] under-the-weather.php:28

WordPress Hooks 10

actioninitunder-the-weather.php:20

actioninitunder-the-weather.php:26

actionadmin_menuunder-the-weather.php:38

actionadmin_initunder-the-weather.php:52

actionadmin_initunder-the-weather.php:471

actionwp_headunder-the-weather.php:528

actionwp_enqueue_scriptsunder-the-weather.php:542

actionadmin_enqueue_scriptsunder-the-weather.php:652

filterstyle_loader_tagunder-the-weather.php:701

actionrest_api_initunder-the-weather.php:734

Maintenance & Trust

Under The Weather Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedApr 3, 2026

PHP min version7.2

Downloads2K

Community Trust

Rating100/100

Number of ratings3

Active installs20

Alternatives

Under The Weather Alternatives

Location Weather – WordPress Weather Forecast, AQI, Temperature and Weather Widget

location-weather

100

Customizable WordPress Weather Forecast plugin to display Current Temperature, Hourly & Daily Forecasts, up to 16-Day, Air Quality, & Live Weather Map

10K 1 CVE

wp-forecast

wp-forecast is a highly customizable plugin for wordpress, showing weather-data from open-meteo.com and/or openweathermap.com.

5K 2 CVEs

Weather Forecast Widget

weather-forecast-widget

100

"Weather Forecast Widget" displays current weather and hourly/daily forecasts in a widget using a shortcode.

200 No CVEs

Moody Weather

moody-weather

Displays a mood and icon based on the current weather conditions using data from OpenWeatherMap.

10 No CVEs

Spelhubben Weather

spelhubben-weather

100

Weather widget, Gutenberg block and shortcode with optional map and multi-provider forecasts.

10 No CVEs

Developer Profile

Under The Weather Developer Profile

Seth Smigelski

5 plugins · 20 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Under The Weather

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/under-the-weather/build/index.css/wp-content/plugins/under-the-weather/build/index.js/wp-content/plugins/under-the-weather/weather-widget.css/wp-content/plugins/under-the-weather/weather-widget.js

Script Paths

/wp-content/plugins/under-the-weather/build/index.js/wp-content/plugins/under-the-weather/weather-widget.js

Version Parameters

under-the-weather/build/index.css?ver=under-the-weather/build/index.js?ver=under-the-weather/weather-widget.css?ver=under-the-weather/weather-widget.js?ver=

HTML / DOM Fingerprints

CSS Classes

under-the-weather-widgetutw-widgetutw-iconutw-temputw-descriptionutw-locationutw-humidityutw-wind+4 more

Data Attributes

data-api-keydata-locationdata-unitsdata-styledata-theme-modedata-display-mode+5 more

JS Globals

underTheWeather

Shortcode Output

[under_the_weather

FAQ