AT News Scroller Security & Risk Analysis

wordpress.org/plugins/at-news-scroller

A simple plugin to pull latest post from certain category as News ticker.

80 active installs v0.4 PHP + WP 3.7+ Updated Sep 15, 2021
latest-post-scrollernewsscrollticker
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is AT News Scroller Safe to Use in 2026?

Generally Safe

Score 85/100

AT News Scroller has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4yr ago
Risk Assessment

The 'at-news-scroller' plugin v0.4 exhibits a generally good security posture based on the provided static analysis. The absence of any known vulnerabilities (CVEs) and a clean vulnerability history are strong indicators of responsible development. The code also demonstrates good practices like 100% of SQL queries using prepared statements and a significant number of capability checks. However, there are areas for improvement. The relatively low percentage of properly escaped output (70%) suggests a potential for cross-site scripting (XSS) vulnerabilities if user-supplied data is not consistently sanitized before being displayed. While the attack surface is small and currently appears to be protected, a higher output escaping rate would further mitigate risks.

Key Concerns

  • Potentially unescaped output
Vulnerabilities
None known

AT News Scroller Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

AT News Scroller Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
68
160 escaped
Nonce Checks
8
Capability Checks
18
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

70% escaped228 total outputs
Attack Surface

AT News Scroller Attack Surface

Entry Points2
Unprotected0

Shortcodes 2

[at-scroll-code] includes\functions.php:48
[at-scroll-code] trunk\includes\functions.php:48
WordPress Hooks 48
actionat_ticker_codeincludes\functions.php:32
actionwp_headincludes\functions.php:41
actioninitincludes\tgm\class-tgm-plugin-activation.php:275
actionadmin_menuincludes\tgm\class-tgm-plugin-activation.php:422
actionadmin_headincludes\tgm\class-tgm-plugin-activation.php:423
filterinstall_plugin_complete_actionsincludes\tgm\class-tgm-plugin-activation.php:426
filterupdate_plugin_complete_actionsincludes\tgm\class-tgm-plugin-activation.php:427
actionadmin_noticesincludes\tgm\class-tgm-plugin-activation.php:430
actionadmin_initincludes\tgm\class-tgm-plugin-activation.php:431
actionadmin_enqueue_scriptsincludes\tgm\class-tgm-plugin-activation.php:432
actionload-plugins.phpincludes\tgm\class-tgm-plugin-activation.php:435
actionswitch_themeincludes\tgm\class-tgm-plugin-activation.php:439
actionswitch_themeincludes\tgm\class-tgm-plugin-activation.php:442
actionadmin_initincludes\tgm\class-tgm-plugin-activation.php:447
actionswitch_themeincludes\tgm\class-tgm-plugin-activation.php:452
filterupgrader_source_selectionincludes\tgm\class-tgm-plugin-activation.php:797
actionplugins_loadedincludes\tgm\class-tgm-plugin-activation.php:1913
filtertgmpa_table_data_itemsincludes\tgm\class-tgm-plugin-activation.php:2037
filterupgrader_source_selectionincludes\tgm\class-tgm-plugin-activation.php:2764
actionadmin_initincludes\tgm\class-tgm-plugin-activation.php:2924
actionupgrader_process_completeincludes\tgm\class-tgm-plugin-activation.php:3019
filterupgrader_post_installincludes\tgm\class-tgm-plugin-activation.php:3076
filterupgrader_post_installincludes\tgm\class-tgm-plugin-activation.php:3218
actiontgmpa_registerincludes\tgm\tgm-init.php:36
actionat_ticker_codetrunk\includes\functions.php:32
actionwp_headtrunk\includes\functions.php:41
actioninittrunk\includes\tgm\class-tgm-plugin-activation.php:275
actionadmin_menutrunk\includes\tgm\class-tgm-plugin-activation.php:422
actionadmin_headtrunk\includes\tgm\class-tgm-plugin-activation.php:423
filterinstall_plugin_complete_actionstrunk\includes\tgm\class-tgm-plugin-activation.php:426
filterupdate_plugin_complete_actionstrunk\includes\tgm\class-tgm-plugin-activation.php:427
actionadmin_noticestrunk\includes\tgm\class-tgm-plugin-activation.php:430
actionadmin_inittrunk\includes\tgm\class-tgm-plugin-activation.php:431
actionadmin_enqueue_scriptstrunk\includes\tgm\class-tgm-plugin-activation.php:432
actionload-plugins.phptrunk\includes\tgm\class-tgm-plugin-activation.php:435
actionswitch_themetrunk\includes\tgm\class-tgm-plugin-activation.php:439
actionswitch_themetrunk\includes\tgm\class-tgm-plugin-activation.php:442
actionadmin_inittrunk\includes\tgm\class-tgm-plugin-activation.php:447
actionswitch_themetrunk\includes\tgm\class-tgm-plugin-activation.php:452
filterupgrader_source_selectiontrunk\includes\tgm\class-tgm-plugin-activation.php:797
actionplugins_loadedtrunk\includes\tgm\class-tgm-plugin-activation.php:1913
filtertgmpa_table_data_itemstrunk\includes\tgm\class-tgm-plugin-activation.php:2037
filterupgrader_source_selectiontrunk\includes\tgm\class-tgm-plugin-activation.php:2764
actionadmin_inittrunk\includes\tgm\class-tgm-plugin-activation.php:2924
actionupgrader_process_completetrunk\includes\tgm\class-tgm-plugin-activation.php:3019
filterupgrader_post_installtrunk\includes\tgm\class-tgm-plugin-activation.php:3076
filterupgrader_post_installtrunk\includes\tgm\class-tgm-plugin-activation.php:3218
actiontgmpa_registertrunk\includes\tgm\tgm-init.php:36
Maintenance & Trust

AT News Scroller Maintenance & Trust

Maintenance Signals

WordPress version tested5.8.13
Last updatedSep 15, 2021
PHP min version
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs80
Developer Profile

AT News Scroller Developer Profile

Abhash Tech

1 plugin · 80 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect AT News Scroller

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/at-news-scroller/css/styles.css/wp-content/plugins/at-news-scroller/js/jquery.news-ticker.min.js/wp-content/plugins/at-news-scroller/js/main.js
Script Paths
/wp-content/plugins/at-news-scroller/js/jquery.news-ticker.min.js/wp-content/plugins/at-news-scroller/js/main.js
Version Parameters
at-news-scroller/css/styles.css?ver=at-news-scroller/js/jquery.news-ticker.min.js?ver=at-news-scroller/js/main.js?ver=

HTML / DOM Fingerprints

CSS Classes
at-news-scroller
Data Attributes
data-delaydata-news-speeddata-pause-on-hover
JS Globals
jQuery.fn.newsTicker
FAQ

Frequently Asked Questions about AT News Scroller