Hi,
After i updated php 7.4 to php 8.3 i have two warnings on my site:
Warning: Undefined variable $post in [..]/wp-content/plugins/enhanced-text-widget/enhanced-text-widget.php(68) : eval()'d code on line 12
Warning: Attempt to read property "ID" on null in /[..]/wp-content/plugins/enhanced-text-widget/enhanced-text-widget.php(68) : eval()'d code on line 12
Is there anything that can solve this problem?
Thank you very much!
NVM i just see that this isn’t the plugin’s fault
]]>Hi, I’m looking to customize the Content widget layout on my site. Is there a way to adjust the formatting or add custom fields?
]]>good evening dear experts of the Enhanced Text Widget
i just stumbled upon your site – and the plugin: Well i am after a little script that allows me to add more functionality on to my website:
well i am about to create a wordpress-plugin that offers the output of the following data …the data of a a Neaby-search:
can we create a quewry that shows up all the schools that are in the near – in other words
example: what i am after. how to create a request to find all the schools – in the area of – let us say munich – in a radius of 10 km for example!?
a output that shows all the schools around a certain point – or in other words; all in Munich – in a area /(radius) of let us say 10 kilometers can we create a query that works on Overpass-turbo.eu
eg like so: first of all see the intened osm – nearby-search that runs against the overpass-Turbo.eu -API
[out:csv(::id,::type,::lon,::lat,amenity,name,"addr:postcode","addr:city","addr:street","addr:housenumber","contact:website",website,"contact:email")]
[timeout:600];
area[name="München"];
nwr(area)[name="Marienplatz"];
nwr["amenity"="school"](around:10000);
out center;it gives back the results:
@id @type @lon @lat amenity name addr:postcode addr:city addr:street addr:housenumber contact:website website contact:email
312793352 node 11.5815046 48.1322045 school Schulverbund München 80469 München Kohlstra?e 5 https://www.schulverbund.de/
703266518 node 11.5746643 48.1387135 school EAM School of International Business https://eam-muenchen.com/
1096318121 node 11.5827303 48.1368214 school Otto-Falckenberg-Schule 80539 München Stollbergstra?e 7a https://www.otto-falckenberg-schule.de/
1096318127 node 11.5822067 48.1376239 school Otto-Falckenberg-Schule 80539 München Falckenbergstra?e 2 https://www.otto-falckenberg-schule.de/
1142514805 node 11.5665710 48.1353750 school Evangelisches Bildungszentrum 80331 München Herzog-Wilhelm-Stra?e 24 https://www.stadtakademie-muenchen.de/ [email protected]
1576527684 node 11.5728245 48.1336093 school Theresia-Gerhardinger-Grundschule am Anger https://gs-am-anger.de/
1576528339 node 11.5721671 48.1333479 school Theresia-Gerhardinger-Gymnasium am Anger https://www.tggaa.de/
2493656150 node 11.5814603 48.1366835 school F?rderschule an der Herrnstra?e 80539 München Herrnstra?e 21 https://stadt.muenchen.de/service/info/sonderpaedagogisches-foerderzentrum-muenchen-mitte-2-herrnstr-21/1060084/
2654727020 node 11.5812823 48.1365482 school Grundschule an der Herrnstra?e
I think that i can use here the enhanced – Text-Widget-Plugin. What do you think!?
hmm – well – i think that this could be a first step into the direction: i think that i hopefully can use your plugin to set up a WordPress plugin that creates a widget called “OSM-Nearby Schools Widget”: Again What is aimed: Well the widget schould retrieve nearby schools using Overpass API within a 10km radius of Munich’s coordinates (48.1351 latitude, 11.5820 longitude), and displays them in an unordered list. Well we may need to adjust the coordinates and then run it against the Overpass API query to fit even more specific requirements.
Do you have some additional ideas – what to add to the plugin(logic) of your plugin – i guess that we can use the enhanced text widgtet – and finally get such a output!`?
]]>Before the last version, I can insert a span class in titles like:
[span class=my_class]Text[/span] Rest_of_text
?It’s possible to do that with the present version?
Despite the update to 1.6.3, there is still a vulnerability being flagged by Patchstack as seen in my link. My Cpanel is still alerting me to a security vulnerability in the plugin and is periodically deactivating it.
]]>Enhanced Text Widget <= 1.6.2 – Missing Authorization via etw_hide_admin_notification_callback
Wordfence Intelligence
CVSS 5.3 (Medium)
Publicly Published December 1, 2023
Last Updated December 5, 2023
Researcher Abdi Pranata
Description
The Enhanced Text Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the etw_hide_admin_notification_callback function in versions up to, and including, 1.6.2. This makes it possible for unauthenticated attackers to hide admin notifications.
References
patchstack.com
Wordfence reporting “critical” security vulnerability in this plugin.
Fix will be available soon??
]]>Wordfence is disabling this plugin on my site due to a security vulnerability, is a patch coming soon? my site is highly dependent on this plugin.
]]>According to WordFence, “Enhanced Text Widget” has a security vulnerability. Current Plugin Version:?1.6.2. Is there a fix coming?
]]>After the latest update, the WPForms forms on our website no longer submit.
]]>Hello,
Will you be addressing the following vulnerability reported by cPanel’s WP Toolkit?
WordPress Enhanced Text Widget plugin <= 1.6.2 – Broken Access Control vulnerability
Thanks.
]]>Hello, since version 1.5.8 the widget settings not showing up anymore. Just the widget title, Delete and Done are shown. The Classic widgets plugin is activated. Happens on WP versions 6.2.3 and 6.3.2 in a multisite installation.
Thanks for advice.
]]>Hello, the Show/Hide On Checked Pages function of Enhanced Text Widget does not allow me any more to specify on which page to display a widget. Existing pages are not found. Can somebody please help me with this?
]]>I posted a thread 7 months ago that said I am getting the following in my error_log file:
PHP Warning: Undefined array key “REQUEST_METHOD” in /…/wp-content/plugins/enhanced-text-widget/modules/tryOutPlugins/tryOutPlugins.php on line 26
That thread is now closed but not resolved and I am still getting this error. Should be an easy fix but no action on it yet. Any plan to address it?
]]>
“The Enhanced Text Widget plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on one of its functions in versions up to, and including, 1.5.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to make use of this functionality.”- Wordfence
all my sites (prolly 20 or more of them)
use enhanced text, and they all have
Critical Problems:
* The Plugin “Enhanced Text Widget” has a security vulnerability.
Vulnerability Severity: 4.3/10.0 (Medium) Vulnerability Information
https://www.ads-software.com/plugins/enhanced-text-widget/#developers
is there a fix?
They all have the latest WP.
]]>Within 2 seconds of logging into the site as an admin, all Enhanced Text Widgets were removed. I use Stream to track backend activity. It shows “Enhanced Text widget reactivated,” and then “Enhanced Text widget removed from ‘”‘Main Sidebar.'” I’m using WordPress 6.1.1 and PHP 7.4
]]>I updated the widget last night and now my Google ads, which are served through Enhanced Text Widget, are no longer showing. I’m not sure how to troubleshoot this, any suggestions?
]]>I am getting the following in my error_log file:
PHP Warning: Undefined array key “REQUEST_METHOD” in /…/wp-content/plugins/enhanced-text-widget/modules/tryOutPlugins/tryOutPlugins.php on line 26
]]>Hey guys. I’ve just updated Enhanced Text Widget (4/16/2002) and get this message:
“This plugin provides a classic widget type, and needs the Classic Widgets plugin to function properly on this WordPress version.”
Everything seems fine without doing a thing. Is there anything I need to do? Thanks!
]]>Hi,
“Enhanced Text” have this settings checkboxes:
– Do not display the title
– Do not show empty widgets
– Open URL in a new window
– Automatically add paragraphs to the content
– Do not output before/after_widget/title
No matter which checkboxes are unchecked, they always saves as checked.
Here are the steps I am doing:
I add a “Legacy Widget” and choose “Enhanced Text”. By default, checkboxes are unchecked. I don’t check any, I put content in the title and text area and I save (“Update” button). I see the message “Saved Widgets.”. Right after that, I reload the page, all the boxes are checked.
If I try to uncheck the checkboxes again and save again and again, all the checkboxes stay checked, the unchecked state never saves. If I change the title or text, it saves fine.
Could it be a server memory problem?
I’ve emptied my cache and test in Firefox and Chrome, it’s the same problem.
Thanks for your help!
]]>Hello,
The Enhanced Text widget used to work perfectly well until last weeb, but I’m sorry, I come to report wordpress 5.8 broke it.
To be more accurate
– the widgets using this plugin still function on the wordpress blogs where they are present, for the visitors
– but they cannot be modified as admin, in the wp-admin/widgets.php section
In that wp-admin/widgets.php section, as soon as widgets using the present plugin are listed, two error messages show up, multiple times, on top of the admin, with a text in here. Here’s a screenshot of the first error message: https://imgur.com/a/VpF4o9R
The first error text, shown as soon as the widgets are listed, is
The "custom_html" block was affected by errors and may not function properly. Check the developer tools for more details.
In the developer tools, I search for custom_html, and there is this result, indeed, in the error log, there’s this information:
POST (the blog's URL)/wp-json/wp/v2/widget-types/custom_html/encode?_locale=user
403
Forbidden
HTTP/2
transfer 2,08 Ko (size 3,97 Ko)
strict-origin-when-cross-originNext, I still try to edit a widget using the Enhanced Text plugin, and there is 2nd error message:
The "execphp" block was affected by errors and may not function properly. Check the developer tools for more details.
Developer tools, searching for “execphp” gives:
POST (the blog’s URL)/wp-json/wp/v2/widget-types/execphp/encode?_locale=user
403 Forbidden
Is there a hope, dear plugin maintainer, that this may be fixed, pretty please with a sugar on top? ??
Thank you very much if you can fix it, I’ll be grateful!
(Oh, I forgot contextualization: the error messages show in both Chrome and Firefox. Two blogs with strongly different plugins in them, among with the current plugin, both have the same issue. The server hosting the blogs is a Debian Buster, with HP version: 7.4.22.)
]]>В логфайле каждые 3-5 минут появляется сообщение …/wp-content/plugins/enhanced-text-widget/enhanced-text-widget.php(68) : eval()’d code on line 39
Причину не смог определить. Плагин работает.
Dear devs,
I’ve posted a general question here with some details.
As suggested, Enhanced Text plugin may be the best option to achieve my goal. In a first try I see that the PHP echoes the var as expected, however the bar chart is not showing up, not even the hardcoded value.
Is there any incompatibility in Enhanced Text to render the js charts?
Cheers, Gustavo.
]]>This plugin hasn’t been updated in 6 months. Can you confirm that it works with WP 5.6?
]]>Hi, I keep getting this message in WP Admin:
Please confirm your email by clicking on the link we sent to [email protected]. This makes sure you’re not a bot. – Enhanced Text Widget
Any suggestions for resolving this?
]]>I would like to request a list of changes made from version 1.5 to 1.5.1. Also, I would like to ask what is the minimum PHP version that version 1.5.1 of this plugin can work with.
Thank you!
]]>I have integrated a userscript on my site with enhanced text widget.
Instead of ?, ü or ?, ? etc. a ? is displayed!
any idea?
Thanks and greetings from Vienna,
Ingrid
I was having a flash of hidden content when my backend page loaded.
I discovered it was from the Analyst component (sellcode.com) of this plugin.
I have nothing against you/them collecting money/data, but that component is really not behaving.
For example, this
<div id="analyst-opt-out-modal" class="analyst-modal" style="display: none">
<div class="analyst-modal-content" style="width: 600px">...</div>
</div>is present ON EVERY SINGLE BACKEND PAGE LOAD.
I mean: why compose a message and then hide it!?
Look, seriously:
in the source of my dashboard the word “analyst” is present 151 times and analyst is responsible for a total of 357 non-blank lines (or 15Kb !!!) of html/js code.
Is it sensible? Is it a punishment for not optin-in?
I know it’s not your fault, but I strongly advocate that you put pressure on them to fix all that mess (and we’re not even seeing the php part!)
To me the only sensible implementation would be that the “optin” button was a plain dead href anchor with no js or preloaded content.
BTW while I was investigating this I found that also “Freemius” component has similar issues (now I’m going to quantify them).
Thank you
Let me know if you need more data
`dirname() expects parameter 1 to be string, object given in /home/upstate/public_html/wp-content/plugins/enhanced-text-widget/analyst/sdk_resolver.php on line 30′
I get this message over and over in my PHP error log now. I’m using PHP 7.3, latest WP, latest Enhanced Text Widget plugin.
Any idea how to figure out where this is coming from?
Thanks