Template diagnostics expose theme and file information in the WordPress toolbar to help explain how a page was rendered. Show Current Template version 0.5.4 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-65720. The review focused on toolbar visibility, user access, template and theme names, included file output, and escaping of diagnostic information.
| Name of | Show Current Template |
| Version | 0.5.4 |
| Active installations | 100,000+ |
| Description | Displays the current template file, active theme name, and included template file names in the WordPress toolbar for theme diagnostics. |
| Security | Successfully tested for: SQL Injection (SQLi) Cross-Site Scripting (XSS) – Stored and Reflected Cross-Site Request Forgery (CSRF) Authentication Vulnerabilities Authentication Bypass Exploits Privilege Escalation Buffer Overflow Denial-of-Service (DoS) vectors Data Leakage Vulnerabilities Insecure Dependency Usage Remote Code Execution (RCE) Risks Unauthorized File Access Insufficient Injection Protection Information Disclosure via Misconfigured Endpoints |
| CleanTalk Certification | Awarded PSC-2026-65720 through the CleanTalk Plugin Security Certification program for version 0.5.4. |
| Additional Information | Review which users can see template diagnostics and keep development access limited to the appropriate roles. Recheck the displayed template information after changing themes or template overrides. |
| Plugin Security Certification by CleanTalk |  |
| Logo of the plugin |  |
PSC by CleantalkMake security review part of your plugin development process and give WordPress site owners a clear certification reference.
Key Features
Show Current Template adds template information to the WordPress toolbar while a page is being viewed. It identifies the active theme, the current template file, and included template files, helping developers trace which theme components produced the page. This provides a compact diagnostic view during theme work without requiring a separate report to understand the active template path.
Security Assurance
The review concentrated on access to the toolbar diagnostic display, the handling of template and theme names, and the output of included file information. Escaping and visibility of those values were part of the certification scope. The diagnostic data is useful during development, and access should reflect the roles responsible for maintaining the theme.
The plugin has been successfully tested for:
✅ Information Leakage Vulnerabilities
✅ SQL Injection Vulnerabilities
✅ Cross-Site Scripting (XSS) Attacks
✅ Cross-Site Request Forgery (CSRF) Attacks
✅ Authentication and Authentication Bypass Vulnerabilities
✅ Privilege Escalation Vulnerabilities
✅ Buffer Overflow Vulnerabilities
✅ Denial-of-Service (DoS) Vulnerabilities
✅ Data Leakage Vulnerabilities
✅ Insecure Dependencies
✅ Code Execution Vulnerabilities
✅ File Unauthorized Access Vulnerabilities
✅ Insufficient Injection Protection
Conclusion
Show Current Template version 0.5.4 has received PSC-2026-65720. The certification covers the reviewed toolbar display and its handling of theme and template information. Keep the plugin current and use the diagnostic output as a guide when checking theme changes and included template files.
Note: The date and certification information may change over time. It is advisable to verify the latest details on the plugin developer’s website.
