WPFront Scroll Top
WPFront Scroll Top has one disclosed vulnerability in the WordSec catalog, all reported in 2021; it is fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 5.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for WPFront Scroll Top has a vendor fix available, so running the current release closes it.
All of these findings were reported by Asif Nawaz Minhas. WPFront Scroll Top is installed on roughly 200,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2021-24564WPFront Scroll Top <= 2.0.5 - Authenticated Stored Cross-Site Scripting
Read the full analysisVulnerability Records

WPFront Scroll Top
Author
Syam Mohan
Enhance user experience and site navigation with a lightweight, customizable “Scroll to Top” button. This plugin adds a smooth-scrolling button that appears as users scroll down the page and disappears when they return to the top. Designed for speed and seamless integration, it works with any WordPress theme and includes options for custom icons, button position, color, animation, and intelligent display rules. No coding required—just install and configure in minutes. Perfect for blogs, long-form articles, eCommerce sites, or any website where easy navigation improves usability. Key Features & Customization Intelligent Display: Automatically appears as users scroll down, then disappears when at the top. Smooth Scroll Animation: Provides a fluid and pleasant “back to top” experience. Flexible Destinations: Internal Page Scroll: Link the button to any specific element within the current page. External Page Redirection: Redirect users to any other page or URL. Customizable Button Design: Choose between text, custom image (PNG/SVG), or Font Awesome icons. Use any image URL for complete branding control. Responsive Control: Mobile-Friendly: Option to hide the button on smaller devices/windows for better mobile UX. iFrame Compatibility: Ensures it doesn’t appear inappropriately within iframes. Targeted Visibility: Easily show or hide the button on specific pages or posts. Temporary Display: Auto-hide the button after a set duration for a cleaner interface. Optimized Performance: Utilizes Async JavaScript to ensure fast page loading. Accessibility Focused: Built with ARIA labels and screen reader text for inclusive navigation. SEO-Friendly Markup: Employs semantically correct HTML elements for optimal search engine and accessibility performance. Optimized Performance: Adds functionality without slowing down your site. Easy-to-Use Admin Panel: Configure all settings intuitively from your WordPress dashboard.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C