PHP Code Widget

Like the Text widget, but also allows working PHP code to be inserted.

v2.4Samuel Wood (Otto)Updated 2022-03-30Added Mar 20, 200880k+ installs94% rating
64
Score
22
Errors
1
Warnings
+0
Change

Category Scores

Security39
Repo89
Performance100
Maintainability95

Top Issues by Category

Issues Details

23 issues found in latest scan

ERROR16
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$after_title'.

ERROR2
WordPress.Security.EscapeOutput.UnsafePrintingFunction

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERROR1
Generic.PHP.ForbiddenFunctions.Found

The use of function eval() is forbidden

WARNING1
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "widget_execphp".

ERROR1
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERROR1
outdated_tested_upto_header

Tested up to: 5.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERROR1
plugin_header_no_license

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

Latest Snapshot

Findings

23

Errors

22

Warnings

1

Score History

First score snapshot

First scan completed Jun 20, 2026

v2.4 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v2.4

64

Latest

Findings
23
Errors
22
Warnings
1
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins