WP Awesome Scrollbar Security & Risk Analysis

wordpress.org/plugins/wp-awesome-scrollbar

WP Awesome Scrollbar is highly customizable WordPress scrollbar plugin. Features include vertical and horizontal scrollbar.

30 active installs v1.0 PHP + WP 3.9+ Updated Jan 19, 2015
awesome-scrollerscrollbarscrollerwp-scrollbarwp-scroller
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP Awesome Scrollbar Safe to Use in 2026?

Generally Safe

Score 85/100

WP Awesome Scrollbar has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11yr ago
Risk Assessment

The wp-awesome-scrollbar plugin version 1.0 exhibits a mixed security posture. On the positive side, the static analysis reveals no known critical vulnerabilities in its code, such as dangerous functions, raw SQL queries, file operations, or external HTTP requests. The absence of any recorded CVEs in its history further suggests a relatively clean track record. However, significant concerns arise from the lack of output escaping. With 7 total outputs and 0% properly escaped, this presents a substantial risk for cross-site scripting (XSS) vulnerabilities. While the attack surface appears minimal and the vulnerability history is clean, the complete absence of output escaping is a serious oversight that could allow attackers to inject malicious scripts through user-supplied data displayed by the plugin. This is the primary area of concern that needs immediate attention.

Key Concerns

  • All outputs are unescaped, high XSS risk
  • No nonce checks on entry points
  • No capability checks on entry points
Vulnerabilities
None known

WP Awesome Scrollbar Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WP Awesome Scrollbar Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
7
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped7 total outputs
Attack Surface

WP Awesome Scrollbar Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[scrollbar-shortcode] wp-awesome-scrollbar.php:141
WordPress Hooks 3
actionwp_enqueue_scriptswp-awesome-scrollbar.php:19
actionadmin_enqueue_scriptswp-awesome-scrollbar.php:29
actionwp_footerwp-awesome-scrollbar.php:135
Maintenance & Trust

WP Awesome Scrollbar Maintenance & Trust

Maintenance Signals

WordPress version tested4.1.42
Last updatedJan 19, 2015
PHP min version
Downloads4K

Community Trust

Rating80/100
Number of ratings2
Active installs30
Developer Profile

WP Awesome Scrollbar Developer Profile

wpshaper

2 plugins · 120 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect WP Awesome Scrollbar

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-awesome-scrollbar/css/scrollbar-style.css/wp-content/plugins/wp-awesome-scrollbar/css/wp-awesome-scrollbar.css/wp-content/plugins/wp-awesome-scrollbar/js/scrollbar-script-min.js/wp-content/plugins/wp-awesome-scrollbar/css/wp-awesome-scrollbar-admin.css/wp-content/plugins/wp-awesome-scrollbar/js/cp-active.js
Script Paths
/wp-content/plugins/wp-awesome-scrollbar/js/scrollbar-script-min.js/wp-content/plugins/wp-awesome-scrollbar/js/cp-active.js
Version Parameters
wp-awesome-scrollbar/css/scrollbar-style.css?ver=wp-awesome-scrollbar/css/wp-awesome-scrollbar.css?ver=wp-awesome-scrollbar/js/scrollbar-script-min.js?ver=wp-awesome-scrollbar/css/wp-awesome-scrollbar-admin.css?ver=wp-awesome-scrollbar/js/cp-active.js?ver=

HTML / DOM Fingerprints

JS Globals
window.mCustomScrollbar
FAQ

Frequently Asked Questions about WP Awesome Scrollbar