Scroll Text Widget Security & Risk Analysis

wordpress.org/plugins/scroll-text-widget

Scroll Text Widget is a plugin to automically scroll up the content inserted in the description area of the widget.

200 active installs v1.1 PHP + WP 3.0.1+ Updated Jan 22, 2015
scrolling-texttext-vertical-scrollvertical-scroll
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Scroll Text Widget Safe to Use in 2026?

Generally Safe

Score 85/100

Scroll Text Widget has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11yr ago
Risk Assessment

The 'scroll-text-widget' plugin v1.1 exhibits a strong security posture based on the provided static analysis. The absence of any identified attack surface (AJAX handlers, REST API routes, shortcodes, cron events) significantly reduces the potential for external exploitation. Furthermore, the code signals indicate good practices such as the absence of dangerous functions and external HTTP requests, and all SQL queries utilize prepared statements. The lack of any recorded vulnerability history reinforces this positive assessment. However, a notable concern is the relatively low percentage (44%) of properly escaped output. This could leave the plugin susceptible to cross-site scripting (XSS) vulnerabilities if user-supplied data is not handled with sufficient care during rendering. While no specific XSS vulnerabilities were detected in this static analysis, it remains a potential weak point that warrants attention and improvement. Overall, the plugin appears to be securely developed, with the primary area for improvement being output escaping to achieve a more robust security profile.

Key Concerns

  • Low percentage of properly escaped output
Vulnerabilities
None known

Scroll Text Widget Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Scroll Text Widget Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
10
8 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

44% escaped18 total outputs
Attack Surface

Scroll Text Widget Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 5
actionadmin_headScrollTextWidget.php:38
actionadmin_menuScrollTextWidget.php:40
actionadmin_initScrollTextWidget.php:41
actionwidgets_initScrollTextWidget.php:173
actionwp_enqueue_scriptsScrollTextWidget.php:186
Maintenance & Trust

Scroll Text Widget Maintenance & Trust

Maintenance Signals

WordPress version tested4.1.42
Last updatedJan 22, 2015
PHP min version
Downloads15K

Community Trust

Rating80/100
Number of ratings5
Active installs200
Developer Profile

Scroll Text Widget Developer Profile

Brijesh Mishra

3 plugins · 350 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Scroll Text Widget

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/scroll-text-widget/js/scrolltext_custom.js
Script Paths
/wp-content/plugins/scroll-text-widget/js/scrolltext_custom.js

HTML / DOM Fingerprints

CSS Classes
widget_ScrollingText
Data Attributes
behavior="scroll"scrollAmountdirection
Shortcode Output
<marquee behavior="scroll" scrollAmount="" direction="
FAQ

Frequently Asked Questions about Scroll Text Widget