Scroll rss excerpt

Scroll rss excerpt has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Scroll rss excerpt has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Nguyen Xuan Chien. Scroll rss excerpt is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.1.12.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Scroll rss excerpt vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-68892

Scroll rss excerpt <= 5.0 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Scroll rss excerpt banner
Latestv5.0

Scroll rss excerpt

gopiplus@hotmail.com

Author

gopiplus@hotmail.com

2.5(4)
50/100
Last Updated
2022-12-01 (4y ago)
Active Installs
30+
Downloads
9,320
Requires WP
3.4+
Requires PHP
0+
Tested up to
WP 6.1.12
Created
2012-08-06 (14y ago)

Check official website for live demo http://www.gopiplus.com/work/2012/08/04/scroll-rss-excerpt-wordpress-plugin/ Live Demo More info Comments/Suggestion This is a user requested plugin. with this plugin we can setup the RSS slider in our website. in the slider we can configure the title and excerpt. In plugin administration page, we have option to manage RSS link. maximum we can enter four RSS link in the administration page. we can use widget option or short code option to display the slider in the front end. Features of this plugin Easy installation and customization. Widget option for sidebar. Short code option for posts and pages. http://www.gopiplus.com/work/2012/08/04/scroll-rss-excerpt-wordpress-plugin/

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C