Skip to content
OpenAdvisories

Product · syammohanm

WPFront Notification Bar

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-93896

    WPFront Notification Bar <= 3.5.1 - Reflected Cross-Site Scripting via REQUEST_URI

    The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.5.1. This is due to the debug-log output path (write_debug_logs) reflecting the raw value of $_SERVER['REQUEST_URI'] through …

    syammohanm WPFront Notification Bar Web / CMS
  • Medium 4.4
    CVE-2024-0625

    WPFront Notification Bar <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via wpfront-notification-bar-options[custom_class]

    The WPFront Notification Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpfront-notification-bar-options[custom_class]’ parameter in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output esc…

    syammohanm WPFront Notification Bar Web / CMS