WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress ScrollReveal.js Effectss plugin version 1.2 and earlier is vulnerable to a cross-site scripting vulnerability that stems from the plugin’s failure to clean up and escape its settings, which could be exploited by an attacker to exploit the vulnerability to execute JavaScript code on the client side.