How many vulnerabilities does TomAwesome Review Widgets have?

The audit found 45 findings: 0 critical, 8 high, 26 medium severity.

Should I use TomAwesome Review Widgets?

Based on the latest audit (grade C, risk HIGH), review the 45 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

TomAwesome Review Widgets

Q: Is TomAwesome Review Widgets secure?

WP HealthKit's independent audit rates TomAwesome Review Widgets overall risk as HIGH with a report-card grade of C.

Audited at release

v1.0.0WordPress PluginAudited 20 days ago

Create Google review widgets with your own Business Profile OAuth connection or Places API key. Google setup is required.

HIGH

Total Findings

Security Grade

Security Findings

Critical0

High8

Medium26

Low2

Info9

Executive Summary

Is TomAwesome Review Widgets secure? In WP HealthKit's independent 2026 audit, TomAwesome Review Widgets received an overall risk of HIGH and a report-card grade of C across 45 findings (0 critical, 8 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

PHP Compatibility

Requires PHP 8.1Declared minimum: 7.4Mismatch detected

Categories with Findings

PHP CompatibilityPerformanceDatabaseGDPRCoding StandardsType SafetyPlugin ConflictsHook WiringSecurityWordPress CompatibilityPlugin LifecycleDependencies

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![TomAwesome Review Widgets security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/tomawesome-review-widgets)](https://wphealthkit.com/directory/tomawesome-review-widgets)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 8.1Declared minimum: 7.4Mismatch detected

Categories with Findings

PHP CompatibilityPerformanceDatabaseGDPRCoding StandardsType SafetyPlugin ConflictsHook WiringSecurityWordPress CompatibilityPlugin LifecycleDependencies

TomAwesome Review Widgets

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings