I have not found a replacement but have not been happy about the security issue. So I have made a patch. Be warned that the patch below might break some of the advanced shortcode options. I do not use any of them so what I did was sanitize each to strip out any HTML.
Starting at line 144 in /includes/class-widget-shortcode.php of the plugin.
'before_widget' => '<' . esc_html($container_tag) . ' id="' . esc_html($container_id) . '" class="' . esc_html($container_class) . ' ' . esc_html($css_class) . '">',
'before_title' => '<' . esc_html($title_tag) . ' class="' . esc_html($title_class) . '">',
'after_title' => '</' . esc_html($title_tag) . '>',
'after_widget' => '</' . esc_html($container_tag) . '>',
So as you can see I have wrapped every shortcode option with an esc_html function to strip any HTML out of the inputs. If you use html in any of these such as css_class it will break things. But if you only use the plugin to place widgets on your site with the basic shortcode structure like [widget id=”text-2″] then it will still work and be secure.
If you do this I also suggest you edit the version number in the main file init.php so that site scans do not show the vulnerable version number.
]]>Hello,
I like your plugin.
Is an update planned for WordPress 6.0?
Regards
Rainer
It appears the PHP is compatible with 8.0, but it would be great to make sure everything else is up-to-date. Even just updating the version number so it doesn’t look abandoned.
This is a very helpful plugin.
Thank you in advance!
]]>Hello, does you will keep supporting your plugin for current and future WordPress releases? I hope you will.
Thank you.
]]>The site uses widget shortcode to load a fullpage home slider.. it now is blank and gives error , that i can see in admin…
In admin i see this error
Warning: filemtime(): stat failed for D:\home\chasd.org\wwwroot\wp-content\plugins\widget-shortcode/assets/block.js in D:\home\chasd.org\wwwroot\wp-content\plugins\widget-shortcode\includes\class-widget-shortcode-gutenberg.php on line 35
]]>This plugin is not update for more than a year and I got warning from WordFence because of that.
Is this plugin compatible with WordPress 5.8.1?
]]>Our company had an external source create a custom search tool for our website. I insert the tool into our header using the following shortcode:
[md_filter shop-page-slug=”test-search” theme-light-mode=”true”]
[md_part_number_search shop-page-slug=”test-search” theme-light-mode=”true”]
But the tool needs some styling before we feel comfortable launching it, because it currently displays pretty unattractively. I would like to add a class somewhere in the shortcode so that I can adjust CSS, or otherwise find an alternative means to style this so that we can implement it, but I’m a bit out of my depth. Is it possible to change the appearance of the tool this shortcode generates?
]]>Hi. It’s been eight months since this plugin was updated. Before I install it, I want to make sure you have not abandoned it.
Thank you.
]]>It would be nice if you actually provided instruction on how to create a short code. Using Enfold theme and I can’t find anywhere to start the plugin.
]]>El plugin no funciona con la versión de wp 5.5.3
al insertar el shortcode en una pagina, no se visualiza el contenido de los widget en la pagina con el shortcode
Gracias
]]>The plugin has been working fine, but now, for some reason, it stopped working, after the latest update of woocommerce and wordpress.
]]>This plugin does a good job and creates short code easily, I would like to understand how to remove/hide the Widget Shortcode icon from the TinyMCE editor (from Edit/Post/reply toolbar) as I do not wish for normal forum members to have access to this option ?
Plugin is up to date as is wordpress version etc.
Thanks
UK Sentinel
https://ps.w.org/widget-shortcode/assets/screenshot-2.png?rev=1485803
]]>Will not complete update. Get the following message:
“Update Failed: The update cannot be installed because we will be unable to copy some files. This is usually due to inconsistent file permissions.”
All other plugins update on my server just fine, only this one has an issue.
]]>The topic title says it all. There are no options in my widget so there is no save button. Yet in order to get the shortcode your plugin expects me to save the widget that not only does not need saving, but consequently there is no blue save button to push.
Is this a bug you can fix? WordPress obviously can tell there are no options to save so your plugin should be able to tell that too, and just give the shortcode without expecting anything to be saved.
In the mean time, is there a workaround for this?
Steps to reproduce:
1. make a simple “Hello World” plugin for wordpress. Something like “echo “Hello World”; between the minimal required widget plugin header and footer.
2. Activate the plugin and go to the widgets page, drag the new widget to Widget Shortcode and try to get the shortcode. You can’t. That’s the bug.
]]>I am looking for a way to center my widget. Do I need to enter something within the shortcode and add a CSS?
]]>Hello,
Please can you tell me whether or not your plugin works on a multisite installation?
Thank you.
]]>Hello,
We are trying out your plugin version v0.3.5 on a brand new site we are building.
Running the latest versions of WP and Customizr theme on PHPv5.6.40
After activating it we created a Custom HTML widget and placed it on a sidebar.
Copied the widget code [widget id="custom_html-2"]
and placed it in a page.
Works fine.
BUT
We take out the widget from the sidebar and place it in the Inactive widgets area.
We do NOT want it appearing in both places. We just want it in the specific page page.
Now on our error log file we are getting the following repeating Notices every time the page loads:
Notice: Undefined index: wp_inactive_widgets in /wp-content/plugins/widget-shortcode/includes/class-widget-shortcode.php on line 186
Notice: Undefined index: wp_inactive_widgets in /wp-content/plugins/widget-shortcode/includes/class-widget-shortcode.php on line 187
Notice: Undefined index: wp_inactive_widgets in /wp-content/plugins/widget-shortcode/includes/class-widget-shortcode.php on line 188
Can you please see to it?
Thank you
The plugin adds a toolbar in the visual editor where you can add the shortcodes. I’m using Modern Events Calendar that shows visual editor in frontend, and the shortcode toolbar is visible for everyone. This shouldn’t be the case, and I can hide it by hardcoding the plugin, but this change should be in the plugin as default.
Maybe a settings page where you could control the plugin would be good too.
]]>I made a widget of product category and put it on the shop page. The category are being listed one below the other. I want to show them next to each other and I added the following css but it is still now working. Please advice-
#woocommerce_product_categories-5 {
width: 100%;
background-color: #f0edee;
display: inline-block;
list-style-type: none;
float: left;
}
Img- ?????https://www.dropbox.com/s/rw3xm6x62rqftaj/Screenshot%202020-05-14%2018.24.23.png?dl=0
]]>I enter a class for the widget, but it is not shown in the HTML code. What happened? Is it a problem with 5.4?
]]>The widget area disappears completely on mobile.
]]>Since I installed WP 5.4 I get the following error messages:
[01-Apr-2020 13:13:28 UTC] PHP Notice: Undefined index: wp_inactive_widgets in
/mnt/web417/a2/76/52551976/htdocs/waehlt/wp-content/plugins/widget-shortcode/includes/class-widget-shortcode.php on line 185
[01-Apr-2020 13:13:28 UTC] PHP Notice: Undefined index: wp_inactive_widgets in
/mnt/web417/a2/76/52551976/htdocs/waehlt/wp-content/plugins/widget-shortcode/includes/class-widget-shortcode.php on line 186
[01-Apr-2020 13:13:28 UTC] PHP Notice: Undefined index: wp_inactive_widgets in
/mnt/web417/a2/76/52551976/htdocs/waehlt/wp-content/plugins/widget-shortcode/includes/class-widget-shortcode.php on line 187
It seems to be an error in the construct process of a widget I wrote. This is the construction code:
add_action( 'widgets_init', 'stbez_load_widget' );
// Creating the widget
class stbez_widget extends WP_Widget {
function __construct() {
parent::__construct(
// Base ID of your widget
'stbez_widget',
// Widget name will appear in UI
__('Stbez Widget', 'stbez_widget_domain'),
// Widget description
array( 'description' => __( 'Diese Widget stellt den Stimmbezirk aufgrund von Stra?e und Hausnummer fest.', 'stbez_widget_domain' ), )
);
}
Where is the error???
]]>Hello:
This plugin appears to do what I need.
Just curious if the developer is still supporting it or making sure that it is compatible with the latest versions of WordPress… it has been 1 year since the last version was released and there have been 3 major WordPress updates since then.
Please advise. Thanks!
]]>Hello, i love your plugin, i use it in all of my websites. I found an issue with Widget Shortcode after updating WordPress to 5.3.x in a WordPress Multisite installation. In my site https://hannainst.com.mx/ after updating WP to 5.3.x all the pages go to blank page.
If i disable Widget Shortcode plugin the site shows again (without the widgets loaded byr Widget Shortcode), if re enable Widget Shortcode again the pages goes t blank page.
Any help for this?
Thanks
Hi,
I have just installed this plugin and added a Widget to the Shortcode Widget. I pasted the shortcode on my front page and it’s not displayed.
Can you please assist?
Thanks!
]]>I created a widget for my header with a phone number with text:
Need An Electrician? Call Us
555-555-5555
But, I want to style it so it looks good. How do I add CSS to it? Also I want to have it centered and down from the logo. How would rather find something I can use, as I am not a coder. How can I find something I can edit?
]]>Hello, can you help me buy fixing this issue with the plugin?
[Fri Jul 05 01:34:36.595065 2019] [php7:error] [pid 16532] [client 249.248.140.250:36124] PHP Fatal error: ob_start(): Cannot use output buffering in output buffering display handlers in /home/showmetechcom/public_html/wp-content/plugins/widget-shortcode/includes/class-widget-shortcode.php on line 219
It seems that this error states that the Output buffering headers cannot be used by the output buffering due to a misconfiguration in the following plugin: widget-shortcode
]]>Hello!
Are you still supporting this plugin? Does it work with the current version of WordPress?
]]>I have put a widget at the top of my frontpage with this plugin, but it generates a widget with the same element ID as the one it is a copy of, which is shown elsewhere on the homepage, at the same time.
Now two elements have the same ID, I think that is very bad CSS behavior. Can i use a tag in the short code for generating custom ID?
Firstly, thanks for Widget Shortcode. It has really allowed me to add things that were not native to the WP template I chose.
When I set up my WP website/blog, I added shortcode to allow people to subscribe to blog via e-mail to the base of every page. At first it functioned perfectly well and I have a number of followers. However, someone reported to me that they could not sign up, and I checked it out to find it now malfunctions.
If you enter your e-mail address in the box, you get the message: ‘Success! An email was just sent to confirm your subscription. Please go to the email now and click ‘Confirm Follow’ to start subscribing.’ If you then click on ‘Confirm’, you get a message to say there was an error when subscribing.
Has anyone else had this issue, and were you able to resolve it? I’d be grateful for any help. Thank you.
]]>