WP Scroll To Top Security & Risk Analysis

The "my-wp-scroll-to-top" v1.0 plugin exhibits a seemingly secure static analysis profile at first glance, with no identified dangerous functions, SQL injection vulnerabilities, file operations, external HTTP requests, or known CVEs. The complete absence of known vulnerabilities in its history is a positive indicator. However, a significant concern arises from the 0% output escaping rate across its 4 identified output points. This indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities, as user-supplied data or dynamic content is likely being rendered directly into the HTML without proper sanitization. While the plugin has a minimal attack surface and no direct code signals for common vulnerabilities like SQL injection or insecure AJAX handlers, the lack of output escaping is a critical flaw that could be exploited by attackers to inject malicious scripts into the user's browser.