WP-TopBar

WP-TopBar has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2012 and 2023; 2 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 7.1, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (50%). Other recurring categories include Cross-Site Scripting, SQL Injection.

2 of the records (50%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2023.

3 independent researchers contributed these findings, most of them (2) reported by thiennv.

Strategic Overview

Avg CVSSHigh

7.1/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all WP-TopBar vulnerabilities before they are exploited.

Most severe open issueCVSS 8.8CVE-2023-23680

WP TopBar <= 5.36 - Cross Site Request Forgery

Read the full analysis

Vulnerability Records

4 records


2023-01-19 00:00	WP TopBar <= 5.36 - Cross Site Request Forgery WP-TopBar <= 5.36	`CVE-2023-23680`	8.8 High	thiennv	No
2023-01-19 00:00	WP-TopBar <= 5.36 - Authenticated (Administrator+) SQL Injection WP-TopBar <= 5.36	`CVE-2023-23824`	7.2 High	thiennv	No
2013-02-19 00:00	WP-TopBar <= 3.04 - Cross-Site Scripting WP-TopBar < 3.0.5	`N/A`	6.1 Medium	Eugene Dokukin	Yes
2012-09-15 00:00	WP-TopBar <= 4.02 - Cross-Site Request Forgery to Stored Cross-Site Scripting WP-TopBar <= 4.02	`N/A`	6.1 Medium	Blake Entrekin	Yes

Showing 1–4 of 4 reports