Skip to content
Laskyr

Plugins · anchor-smooth-scroll · data as of 2026-11-04

Is Anchor smooth scroll safe? Known vulnerabilities and latest version

The latest version (1.0.2) has 1 known unpatched vulnerability

As of 2026-11-04, the sources we check list the newest release of Anchor smooth scroll as affected and name no fixed version yet.

Last updated on wordpress.org on 2019-05-31, more than two years ago. Plugins that stop getting updates also stop getting security fixes.

Latest version
1.0.2
Last updated
2019-05-31
Active installs
100+
Known issues on record
1
Unpatched in latest
1
Tested up to WP
4.9.35 · PHP 5.6+

Аdds a smooth scroll to the anchors. — by Processby

What to do

  1. There is no fixed version yet. If you can live without Anchor smooth scroll for now, deactivate it and delete it until the developer ships a fix.
  2. If you must keep it, limit who can log in (remove unused accounts, especially low-level ones) and put a web application firewall in front of the site.
  3. Watch for an update: get an email when this page changes.
  4. If you ran a vulnerable version and something looks off (spam pages, strange admins, redirects), run the free scan, or have us clean it: Emergency Cleanup, $499.

With WP-CLI: wp plugin get anchor-smooth-scroll --field=version shows what you run; wp plugin update anchor-smooth-scroll updates it.

Check your version

Known vulnerabilities

1 on record, newest first. “Affected” is the version range the source gives; “fixed in” is the version the source names, or (marked *) the first wordpress.org release after the last affected version.

high 8.1 affects latest 1.0.2 CVE-2025-60072 · published 2025-12-18

File inclusion in Anchor smooth scroll (1.0.2 and older)

Affected
1.0.2 and older
Fixed in
no fix listed yet
Access needed (per CVSS)
No login needed
Range from
CVE record (the advisory publisher) · score by Patchstack
Details from the advisory

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Processby Anchor smooth scroll anchor-smooth-scroll allows PHP Local File Inclusion.This issue affects Anchor smooth scroll: from n/a through <= 1.0.2.

NVD CVE-2025-60072Patchstack advisory

Recent activity

Browse vulnerabilities

Where this data comes from

Badge for your site or docs (states facts with a date, not a verdict):
Anchor smooth scroll vulnerability status badge
<a href="https://laskyr.com/plugins/anchor-smooth-scroll"><img src="https://laskyr.com/plugins/anchor-smooth-scroll/badge.svg" alt="Anchor smooth scroll vulnerability status"></a>

← Check another plugin · Free hacked-site scan

First hour checklist

If the site was just hacked, read the emergency kit before you delete files. The page is free. Email is optional.

Read the emergency kit