Display During Conditional Shortcode

Display During Conditional Shortcode

display-during-conditional-shortcode
Releases5
Frequency2 years 3 weeks
Last Release
Downloads4.82K

Display content conditionally based on a schedule. Choose from three scheduling modes:

  1. Date Range – Show content between specific start and end dates
  2. Recurring – Show content on specific days of the week during a time window
  3. Custom – Use PHP strtotime expressions for flexible scheduling

Gutenberg Block

The Display During block provides a visual editor with:

  • Sidebar controls for all three scheduling modes
  • Date/time pickers for start and end dates
  • Day-of-week checkboxes for recurring schedules
  • Live status indicator (active/inactive)
  • Optional fallback message when content is hidden
  • Copy as Shortcode toolbar button

Shortcodes

The [display_during] shortcode works in the Classic Editor and anywhere shortcodes are supported.

Date range:
[display_during start_day_time=”June 1, 2026 8:00 am” end_day_time=”December 31, 2026 11:59 pm”]Content here[/display_during]

Recurring schedule (new in 2.0):
[display_during days=”mon,wed,fri” start_time=”09:00″ end_time=”17:00″]Office hours content[/display_during]

Custom strtotime:
[display_during start_day_time=”Sun 8:00 am” end_day_time=”Mon 8:00 pm”]Weekend content[/display_during]

With fallback message:
[display_during end_day_time=”June 1, 2026″]Register now![display_during_message]Registration has closed.[/display_during_message][/display_during]

Shortcode Parameters

  • start_day_time – When to start showing content (strtotime string or date)
  • end_day_time – When to stop showing content
  • days – Comma-separated days for recurring mode (mon,tue,wed,thu,fri,sat,sun)
  • start_time – Start time for recurring mode (HH:MM format)
  • end_time – End time for recurring mode (HH:MM format)
  • timezone_location – PHP timezone identifier (defaults to site timezone)
  • message – Plain text fallback message (legacy; use nested shortcode for rich content)

CVE History

CVEPublishedCVSS v3CVSS v2
6.4 MEDIUM

The Display During Conditional Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.