Medium 5.9 Unfixed
2025-04-04≤ 2.0.4
WordPress Welcome Bar plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
Minimum safe version
2.0.4
Update to 2.0.4 or later to address 4 fixable vulnerabilities
WordPress Welcome Bar plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
WordPress Welcome Bar Plugin <= 2.0.3 is vulnerable to Broken Access Control
WordPress Welcome Bar Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
Welcome Bar <= 2.0.3 - Missing Authorization
Welcome Bar <= 2.0.3 - Cross-Site Request Forgery