PLUGIN SECURITY
Is Top Bar safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Top Bar WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
top-bar - Max supported PHP (analyzed): 8.4
Known vulnerabilities
- Top Bar [top-bar] < 3.0.4 [CVE-2022-2629, WordPress Top Bar plugin <= 3.0.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability, Top Bar <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting, Top Bar < 3.0.4 - Admin+ Stored Cross-Site Scripting]
- Top Bar [top-bar] < 3.0.6 [CVE-2024-31928, WordPress Top Bar Plugin <= 3.0.5 is vulnerable to Cross Site Scripting (XSS), Top Bar <= 3.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting]
- Top Bar [top-bar] < 3.0.5 [CVE-2024-1660, WordPress Top Bar Plugin < 3.0.5 is vulnerable to Cross Site Scripting (XSS), Top Bar <= 3.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting, Top Bar < 3.0.5 - Admin+ Stored XSS]
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- CookieAdmin – Cookie Consent Banner — 400000+ active installs — max PHP 8.4
- Image Widget — 100000+ active installs — max PHP 8.4
- Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website — 50000+ active installs — max PHP 8.4
- AdRotate Banner Manager — 20000+ active installs — max PHP 8.4
- Quads Ads Manager for Google AdSense — 20000+ active installs
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.