Neon text
Neon text has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Neon text has a vendor fix available, so running the current release closes it.
All of these findings were reported by Dmitrii Ignatyev. Neon text is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.3.10.
CVE-2023-5817Neon text <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Neon text
Author
ERALION
Plugin for neon text effect. Neon text allows you to create easily shortcode to customize your pages and posts with neon text effect. The shortcode generator helps you through the options for the shortcode. DEMO This plugin uses chuckyglitch’s jQuery script “novacancy” (https://github.com/chuckyglitch/novacancy.js) and makes it easy to use with shortcodes. Available options : reblinkProbability: probability of reblink(0 to 1), Number, optional, default: (1/3) blinkMin: time(sec.) of minimum blink, Number, optional, default: 0.01 blinkMax: time(sec.) of maximum blink, Number, optional, default: 0.5 loopMin: time(sec.) of minimum trigger blink, Number, optional, default: 0.5 loopMax: time(sec.) of maximum trigger blink, Number, optional, default: 2 color: colors, String, optional default: ‘ORANGE’ glow: array of text-shadow colors, Array, optional, default: ‘0 0 80px Orange’, ‘0 0 30px Red’, ‘0 0 6px Yellow’ off: amount of off chars, Number, optional, default: 0 blink: amount of blink chars, Number, optional, default: 0, (0 means all chars) If you have a problem, you can contact me.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C