Smoothscroller
Smoothscroller has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Smoothscroller has a vendor fix available, so running the current release closes it.
All of these findings were reported by Rio Darmawan. Smoothscroller is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2023-23811Smoothscroller <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Smoothscroller
Author
neilgee
This plugin adds a smooth scroll effect motion to anchor links on the same page. You can apply the effect to all posts/pages or certain posts/pages and adjust scroll speed. The links are bound by the id attribute. For the source/origin element, link to the target like so, with a href attribute of the target id <a href="#example"></a> For the target element, you give it a corresponding id attribute like so – <h2 id="example">the target</h2> Usage The settings are found via the dashboard Settings > Smoothscroller Select to apply to all post and pages Select to have on home page only Select to have on certain pages only Select to have on certain posts only Choose the speed of the scroll
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C