News ticker Security & Risk Analysis

wordpress.org/plugins/news-ticker-tj

Premium Quality but free. It is responsive and easily custimzeable. Video tutorials are given for usage and custimization.

50 active installs v1.0.2 PHP + WP 3.0.1+ Updated Oct 23, 2018
breaking-newsbreaking-news-tickerlatest-news-tickerlatest-newsnews-update
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is News ticker Safe to Use in 2026?

Generally Safe

Score 85/100

News ticker has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago
Risk Assessment

The news-ticker-tj v1.0.2 plugin exhibits a mixed security posture. On the positive side, the static analysis reveals no dangerous functions, no raw SQL queries (all use prepared statements), no file operations, no external HTTP requests, and no known CVEs. This suggests a developer who is mindful of common vulnerabilities. However, a significant concern is the complete lack of output escaping for all 20 identified outputs. This is a critical weakness that could lead to cross-site scripting (XSS) vulnerabilities. Additionally, the absence of nonce and capability checks on the single shortcode entry point, while currently unprotected by other means, leaves room for potential unauthorized access or manipulation if the shortcode were to become more dynamic or interact with sensitive data in future versions. The lack of any recorded vulnerabilities in its history is a positive indicator, suggesting a generally secure development history, but this should not overshadow the identified code-level weaknesses.

Key Concerns

  • All outputs are unescaped
  • No nonce check on entry point
  • No capability check on entry point
Vulnerabilities
None known

News ticker Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

News ticker Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
20
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped20 total outputs
Attack Surface

News ticker Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[c_breaking_news] news-ticker-tj.php:37
WordPress Hooks 8
actionadmin_initnews-ticker-tj.php:24
actionadmin_menunews-ticker-tj.php:27
actionadd_meta_boxesnews-ticker-tj.php:31
actionsave_postnews-ticker-tj.php:33
actionwp_enqueue_scriptsnews-ticker-tj.php:41
actionwp_headnews-ticker-tj.php:44
actionwp_footernews-ticker-tj.php:47
actioninitnews-ticker-tj.php:50
Maintenance & Trust

News ticker Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedOct 23, 2018
PHP min version
Downloads14K

Community Trust

Rating60/100
Number of ratings2
Active installs50
Developer Profile

News ticker Developer Profile

Tajul2010

3 plugins · 50 total installs

87
trust score
Avg Security Score
90/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect News ticker

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/news-ticker-tj/css/breakingNews.css/wp-content/plugins/news-ticker-tj/js/breakingNews.js
Script Paths
/wp-content/plugins/news-ticker-tj/js/breakingNews.js
Version Parameters
news-ticker-tj/css/breakingNews.css?ver=1.0.1news-ticker-tj/js/breakingNews.js?ver=1.0.2

HTML / DOM Fingerprints

CSS Classes
breakingNewsbn-titlebn-navi
Data Attributes
id="bn4"
Shortcode Output
<div class="breakingNews"<div class="bn-title"<h2 style="color:<span style="border-color:
FAQ

Frequently Asked Questions about News ticker