PLUGIN SECURITY
Is Top Bar safe?
Simply the easiest way to add a topbar to your website. Create a notification bar in no-time and show a message and a button to your visitors.
What this plugin does
- Slug:
top-bar - Author: WP Darko
- 10000+ active installs
- 80/100 rating (43 reviews on wordpress.org)
- 303899 all-time downloads
- On WordPress.org since 2014-12-02
bannerinfo barnotificationnotification bartop bar
Maintenance status
- Latest known version: 3.0.6
- Last updated: 2026-01-29 7:32pm GMT
- Tested up to WordPress: 6.9.7
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
3 known CVEs on file for Top Bar. Reported between 2022 and 2024.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-31928 | Top Bar [top-bar] < 3.0.6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.9 | < 3.0.6 | 3.0.6 | 2024-04-10 | ✓ fixed in latest |
| CVE-2024-1660 | Top Bar [top-bar] < 3.0.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 3.0.5 | 3.0.5 | 2024-03-25 | ✓ fixed in latest |
| CVE-2022-2629 | Top Bar [top-bar] < 3.0.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 3.0.4 | 3.0.4 | 2022-09-08 | ✓ fixed in latest |
How to fix it
Keep Top Bar updated — 3.0.6 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- CookieAdmin – Cookie Consent Banner — 400000+ active installs — 100/100 (4) — max PHP 8.4
- Image Widget — 100000+ active installs — 98/100 (287) — max PHP 8.4
- Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website — 50000+ active installs — 96/100 (45) — max PHP 8.4
- AdRotate Banner Manager — 20000+ active installs — 86/100 (655) — max PHP 8.4
- Quads Ads Manager for Google AdSense — 20000+ active installs — 98/100 (1087)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.