Admin Bar & Dashboard Access Control

Admin Bar & Dashboard Access Control has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Admin Bar & Dashboard Access Control has a vendor fix available, so running the current release closes it.

All of these findings were reported by Rachit Arora. Admin Bar & Dashboard Access Control is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
4.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Admin Bar & Dashboard Access Control vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.4CVE-2023-47184

Admin Bar & Dashboard Control <= 1.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Admin Bar & Dashboard Access Control banner
Latestv1.2.9

Admin Bar & Dashboard Access Control

Collins Agbonghama

Author

Collins Agbonghama

4.7(18)
94/100
Last Updated
2025-12-04 (9mo ago)
Active Installs
3,000+
Downloads
71,561
Requires WP
6.0+
Requires PHP
5.4+
Tested up to
WP 6.9.7
Created
2016-03-25 (11y ago)

Simple plugin for disabling admin bar and preventing access to WordPress dashboard based on a user’s roles. It is that simple 😀 Plugins you will like: FuseWP: Connect wordPress to marketing platforms and sync users to your email list. ProfilePress: A simple yet powerful eCommerce and paid membership plugin for accepting one-time and recurring payments and selling subscriptions via Stripe & PayPal, restrict content and control user access. Learn more MailOptin – The best WordPress email optin forms, email automation & newsletters plugin in the market.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C