Animator – Scroll Triggered Animations

Animator – Scroll Triggered Animations has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 5.2, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

Every one of the 3 issues recorded for Animator – Scroll Triggered Animations has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Animator – Scroll Triggered Animations is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

5.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Animator – Scroll Triggered Animations vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2024-49308

Animator <= 3.0.15 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2025-07-16 00:00	Animator <= 3.0.16 - Cross-Site Request Forgery Animator <= 3.0.16	`CVE-2025-54039`	4.3 Medium	Nguyen Xuan Chien	Yes
2024-10-15 00:00	Animator <= 3.0.15 - Reflected Cross-Site Scripting Animator <= 3.0.15	`CVE-2024-49308`	6.1 Medium	Abdi Pranata	Yes
2023-11-09 00:00	Animator <= 3.0.10 - Missing Authorization to Plugin Settings Update Animator <= 3.0.10	`CVE-2023-47689`	5.3 Medium	Elliot	Yes

Showing 1–3 of 3 reports

Plugin Profile

Latestv3.1.1

Animator – Scroll Triggered Animations

Author

Toast Plugins

4.5(15)

90/100

Last Updated

2025-12-01 (10mo ago)

Active Installs

1,000+

Downloads

84,691

Requires WP

5.1+

Requires PHP

Tested up to

WP 6.8.8

Created

2019-05-16 (7y ago)

Scroll Triggered Animations is a highly customisable, yet user-friendly interface for implementing CSS animations correctly and efficiently throughout your WordPress website. Whether you’re a highly-skilled web guru, a content editor or you’ve got minimal knowledge of web coding, STA makes the animation procedure easy. It works on any theme, bespoke or not. Activate now and animate your website within minutes. Want to try STA? Demo on a risk free environment here Key points Easy to use Globally control your animations Over 25 Preset Easy animations available out of the box. Create your own CSS animations via the Custom Animation Builder No framework used Scroll Triggered Animations is built to allow any WordPress user (developer or not), to implement professional looking animations without any knowledge of javascript. You can choose to use our preset animations from our default animations library, or create your very own CSS3 animation and integrate it with this plugin. Find out more about this plugin here

View on WordPress.org