GoodBarber

GoodBarber has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.2, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Open Redirect.

Every one of the 2 issues recorded for GoodBarber has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. GoodBarber is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

5.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all GoodBarber vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2025-39523

GoodBarber <= 1.0.26 - Open Redirect

Read the full analysis

Vulnerability Records

2 records


2025-04-16 00:00	GoodBarber <= 1.0.26 - Open Redirect GoodBarber <= 1.0.26	`CVE-2025-39523`	6.1 Medium	Le Ngoc Anh	Yes
2023-10-06 00:00	GoodBarber <= 1.0.23 - Cross-Site Request Forgery via admin_options GoodBarber <= 1.0.23	`CVE-2023-45107`	4.3 Medium	Kévin Mosbahi (Mika)	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv1.0.28

GoodBarber

Author

GoodBarber

5.0(3)

100/100

Last Updated

2026-03-09 (6mo ago)

Active Installs

1,000+

Downloads

82,451

Requires WP

2.8+

Requires PHP

Tested up to

WP 6.9.7

Created

2012-11-28 (14y ago)

GoodBarber plugin is a fork of JSON API created by dphiffer. GoodBarber plugin creates a communication interface between your WordPress and your GoodBarber account. It is used to retrieve content from your WordPress so that you can sync it with your native app created with GoodBarber.

View on WordPress.org