WP Scroll To Top Security & Risk Analysis

wordpress.org/plugins/my-wp-scroll-to-top

WP Scroll to top is beautifully designed and supper plugin.Very easy to use and perfect functionality.

10 active installs v1.0 PHP + WP 3.0.1+ Updated Oct 13, 2015
one-click-scrollerscrollscrollervertical-scroller
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP Scroll To Top Safe to Use in 2026?

Generally Safe

Score 85/100

WP Scroll To Top has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10yr ago
Risk Assessment

The "my-wp-scroll-to-top" v1.0 plugin exhibits a seemingly secure static analysis profile at first glance, with no identified dangerous functions, SQL injection vulnerabilities, file operations, external HTTP requests, or known CVEs. The complete absence of known vulnerabilities in its history is a positive indicator. However, a significant concern arises from the 0% output escaping rate across its 4 identified output points. This indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities, as user-supplied data or dynamic content is likely being rendered directly into the HTML without proper sanitization. While the plugin has a minimal attack surface and no direct code signals for common vulnerabilities like SQL injection or insecure AJAX handlers, the lack of output escaping is a critical flaw that could be exploited by attackers to inject malicious scripts into the user's browser.

Key Concerns

  • Outputs are not properly escaped (XSS risk)
Vulnerabilities
None known

WP Scroll To Top Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

WP Scroll To Top Release Timeline

No version history available.
Code Analysis
Analyzed Apr 16, 2026

WP Scroll To Top Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
4
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped4 total outputs
Attack Surface

WP Scroll To Top Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actioninitjeba-index.php:13
actioninitjeba-index.php:24
actionwp_footerjeba-index.php:113
actionadmin_menujeba-index.php:123
actionadmin_enqueue_scriptsjeba-index.php:126
actionadmin_initjeba-index.php:152
actionwp_headjeba-index.php:276
Maintenance & Trust

WP Scroll To Top Maintenance & Trust

Maintenance Signals

WordPress version tested4.0.38
Last updatedOct 13, 2015
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

WP Scroll To Top Developer Profile

Sohelwpexpert

11 plugins · 200 total installs

78
trust score
Avg Security Score
85/100
Avg Patch Time
50 days
View full developer profile
Detection Fingerprints

How We Detect WP Scroll To Top

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/my-wp-scroll-to-top/style/type/fontello.css/wp-content/plugins/my-wp-scroll-to-top/inc/color-pickr.js
Script Paths
/wp-content/plugins/my-wp-scroll-to-top/js/jquery.divas-1.1.min.js
Version Parameters
my-wp-scroll-to-top/style/type/fontello.css?ver=my-wp-scroll-to-top/inc/color-pickr.js?ver=

HTML / DOM Fingerprints

CSS Classes
icon-up-open
HTML Comments
GO TO TOP
Data Attributes
scroll_bottom_bgscroll_icon_color
JS Globals
scrollUp
FAQ

Frequently Asked Questions about WP Scroll To Top