News Headline Ticker Security & Risk Analysis

wordpress.org/plugins/wp-news-headline-ticker

News Headline Ticker is best wordpress plugin to display breaking news or news ticker at your website!

40 active installs v1.0.5 PHP + WP 4.0+ Updated Mar 18, 2021
awesome-news-tickerheadline-newsheadline-sliderheadline-tickernews-ticker
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is News Headline Ticker Safe to Use in 2026?

Generally Safe

Score 85/100

News Headline Ticker has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5yr ago
Risk Assessment

The `wp-news-headline-ticker` plugin, version 1.0.5, exhibits a mixed security posture. On the positive side, it demonstrates good practices by avoiding dangerous functions, using prepared statements for all SQL queries, and having no recorded vulnerabilities or CVEs. The attack surface is also minimal, with only one shortcode and no AJAX handlers or REST API routes. However, a significant concern is the complete lack of output escaping, meaning that any data processed by the shortcode could potentially be rendered directly into the HTML without sanitization, opening the door for cross-site scripting (XSS) vulnerabilities. Furthermore, the absence of nonce and capability checks on its single entry point (the shortcode) suggests a potential for privilege escalation or unauthorized actions if the shortcode's functionality can be manipulated.

Key Concerns

  • All outputs are unescaped
  • Missing nonce checks on shortcode
  • Missing capability checks on shortcode
Vulnerabilities
None known

News Headline Ticker Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

News Headline Ticker Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped2 total outputs
Attack Surface

News Headline Ticker Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[WPNHT-Ticker] wp-news-headline-ticker.php:131
WordPress Hooks 4
actionadmin_enqueue_scriptswp-news-headline-ticker.php:27
actionwp_enqueue_scriptswp-news-headline-ticker.php:37
actionwp_footerwp-news-headline-ticker.php:122
actionadmin_initwp-news-headline-ticker.php:143
Maintenance & Trust

News Headline Ticker Maintenance & Trust

Maintenance Signals

WordPress version tested5.7.15
Last updatedMar 18, 2021
PHP min version
Downloads5K

Community Trust

Rating0/100
Number of ratings0
Active installs40
Developer Profile

News Headline Ticker Developer Profile

Hasibul Islam Badsha

4 plugins · 50 total installs

86
trust score
Avg Security Score
89/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect News Headline Ticker

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-news-headline-ticker/css/wpnhtp-admin.css/wp-content/plugins/wp-news-headline-ticker/js/cp-active.js/wp-content/plugins/wp-news-headline-ticker/js/wpnhtp.js/wp-content/plugins/wp-news-headline-ticker/css/wpnhtp.css
Script Paths
/wp-content/plugins/wp-news-headline-ticker/js/cp-active.js/wp-content/plugins/wp-news-headline-ticker/js/wpnhtp.js

HTML / DOM Fingerprints

CSS Classes
wpnhtp_bodywpnhtp_label
JS Globals
inewsticker
Shortcode Output
<div class="wpnhtp_body"><div class="label"><ul
FAQ

Frequently Asked Questions about News Headline Ticker