WP App Bar

WP App Bar has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; none of them are fixed as of September 2026. Their average CVSS score is 6.7, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

None of the 2 issues recorded for WP App Bar have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.7/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all WP App Bar vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2026-1074

WP App Bar <= 1.5 - Unauthenticated Stored Cross-Site Scripting via 'app-bar-features' Parameter

Read the full analysis

Vulnerability Records

2 records


2026-03-06 18:49	WP App Bar <= 1.5 - Unauthenticated Stored Cross-Site Scripting via 'app-bar-features' Parameter WP App Bar <= 1.5	`CVE-2026-1074`	7.2 High	0x34rth	No
2025-12-29 00:00	App Bar <= 1.5 - Reflected Cross-Site Scripting WP App Bar <= 1.5	`CVE-2025-68891`	6.1 Medium	Nguyen Xuan Chien	No

Showing 1–2 of 2 reports