PJ News Ticker

PJ News Ticker has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for PJ News Ticker has a vendor fix available, so running the current release closes it.

All of these findings were reported by Ngô Thiên An (ancorn_). PJ News Ticker is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.0.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all PJ News Ticker vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-25094

PJ News Ticker <= 1.9.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

Read the full analysis

Vulnerability Records

1 records


2024-02-12 00:00	PJ News Ticker <= 1.9.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode PJ News Ticker <= 1.9.5	`CVE-2024-25094`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes

Showing 1–1 of 1 reports

Latestv1.9.8

PJ News Ticker

Author

Primitiv Media

4.5(6)

90/100

Last Updated

2025-04-30 (1y ago)

Active Installs

3,000+

Downloads

80,017

Requires WP

4.6+

Requires PHP

Tested up to

WP 6.8.0

Created

2017-01-05 (10y ago)

This plugin is now maintained by the developers at Primitiv Media PJ News Ticker is a small plugin that shows your most recent posts in a marquee style. You can embed the news ticker anywhere you like using shortcodes.

View on WordPress.org