Fixed HTML Toolbar
Fixed HTML Toolbar has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Fixed HTML Toolbar has a vendor fix available, so running the current release closes it.
All of these findings were reported by SavPhill (Savphill). Fixed HTML Toolbar is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-32540Fixed HTML Toolbar <= 1.0.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Fixed HTML Toolbar
Author
Web357
The Fixed HTML Toolbar plugin provides a sleek and customizable toolbar that can be displayed either at the top or bottom of your WordPress site. Ideal for showcasing social media icons, important notifications, or custom HTML content, this plugin ensures your key messages stay visible to users as they scroll through your site. Key Features Flexible Positioning: Display the toolbar at the top or bottom of the page based on your preference. Customizable Design: Choose background and border colors to match your site’s branding. Adjust the toolbar’s border thickness and vertical padding for a polished look. Define margins between icons for precise spacing. Rich Content Options: Add up to 5 linked icons with custom images for social media or other platforms. Include custom HTML content directly in the toolbar using an intuitive editor. Advanced Targeting: Display the toolbar only on specific sections of your site (e.g., homepage, posts, pages, categories, or search results). User-Friendly: Easy-to-use settings panel for seamless configuration. Add custom CSS for advanced styling flexibility. Use Cases Social Media Links: Keep your social profiles accessible to boost engagement. Notifications: Highlight promotional offers, updates, or other important information. Custom HTML Content: Add forms, banners, or any other HTML-based elements.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C