Admin Bar & Dashboard Access Control
Admin Bar & Dashboard Access Control has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Admin Bar & Dashboard Access Control has a vendor fix available, so running the current release closes it.
All of these findings were reported by Rachit Arora. Admin Bar & Dashboard Access Control is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2023-47184Admin Bar & Dashboard Control <= 1.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Admin Bar & Dashboard Access Control
Author
Collins Agbonghama
Simple plugin for disabling admin bar and preventing access to WordPress dashboard based on a user’s roles. It is that simple 😀 Plugins you will like: FuseWP: Connect wordPress to marketing platforms and sync users to your email list. ProfilePress: A simple yet powerful eCommerce and paid membership plugin for accepting one-time and recurring payments and selling subscriptions via Stripe & PayPal, restrict content and control user access. Learn more MailOptin – The best WordPress email optin forms, email automation & newsletters plugin in the market.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C