Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-32129 EUVD-2025-9875GHSA-r7mm-6h33-997h

WordPress Welcome Bar plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Published Apr 4, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Risk Mitigation, Inc. Welcome Bar intelly-welcome-bar allows Stored XSS.This issue affects Welcome Bar: from n/a through <= 2.0.4.

Affected products

VendorProductAffectedFixed
Data443 Risk Mitigation Welcome Bar ≤ 2.0.4 —

References