High · 7.1 CVE-2025-30552 EUVD-2025-7969GHSA-ggw8-5cc8-v5cp

WordPress WordPress Admin Bar Improved plugin <= 3.3.5 - CSRF to Stored XSS vulnerability

Published Mar 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Donald Gilbert Product: WordPress Admin Bar Improved Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in Donald Gilbert WordPress Admin Bar Improved wordpress-admin-bar-improved allows Stored XSS.This issue affects WordPress Admin Bar Improved: from n/a through <= 3.3.5.

Affected products

Vendor	Product	Affected	Fixed
Donald Gilbert	WordPress Admin Bar Improved	≤ 3.3.5	—

References

https://patchstack.com/database/Wordpress/Plugin/wordpress-admin-bar-improved/vulnerability/wordpress-wordpress-admin-bar-improved-plugin-3-3-5-csrf-to-stored-xss-vulnerability?_s_id=cve vdb-entry