Notibar – Notification Bar for WordPress Security & Risk Analysis
wordpress.org/plugins/notibarMultiple notification bars with React-powered customizer, live preview, smart scheduling, and per-bar display rules.
Is Notibar – Notification Bar for WordPress Safe to Use in 2026?
Generally Safe
Score 98/100Notibar – Notification Bar for WordPress has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.
The "notibar" plugin v2.1.9 presents a mixed security posture. On the positive side, static analysis reveals a lack of dangerous functions, no raw SQL queries, and a high percentage of properly escaped output. Furthermore, all identified entry points (AJAX handlers) are protected by nonce and capability checks, and there are no exposed REST API routes, shortcodes, or cron events, indicating a good understanding of secure development practices regarding access control and input sanitization at the entry point level. The taint analysis showing zero flows with unsanitized paths further bolsters this positive view.
Key Concerns
- Vulnerability history includes medium severity XSS, Code Injection, and Missing
- Bundled library Select2 may be outdated or vulnerable
Notibar – Notification Bar for WordPress Security Vulnerabilities
CVEs by Year
Severity Breakdown
3 total CVEs
Notibar <= 2.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Notibar – Notification Bar for WordPress <= 2.1.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via njt_nofi_text
Notibar <= 2.1.4 - Missing Authorization via ajax_install_plugin
Notibar – Notification Bar for WordPress Release Timeline
Notibar – Notification Bar for WordPress Code Analysis
Bundled Libraries
Output Escaping
Notibar – Notification Bar for WordPress Attack Surface
AJAX Handlers 3
WordPress Hooks 19
Maintenance & Trust
Notibar – Notification Bar for WordPress Maintenance & Trust
Maintenance Signals
Community Trust
Notibar – Notification Bar for WordPress Alternatives
Sticky Banner
sticky-banner
Create eye-catching announcement banners that stick to the top or bottom of your site. Perfect for promotions, alerts, and important updates.
AAWEB Announcement Bar
aaweb-announcement-bar
A lightweight announcement bar with scheduling, dismiss button, device visibility and WooCommerce-safe display rules.
Festival Banner
festival-banner
Display festive messages or promotional banners in various positions across your WordPress site — all managed from a beautiful admin interface.
Top Bar
top-bar
Simply the easiest way to add a topbar to your website. Create a notification bar in no-time and show a message and a button to your visitors.
Easy Notification Bar
easy-notification-bar
A simple plugin for displaying a notice at the top of your website that can be closed by the visitor. Completely free and minimal without any upsells.
Notibar – Notification Bar for WordPress Developer Profile
13 plugins · 497K total installs
How We Detect Notibar – Notification Bar for WordPress
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/notibar/assets/css/notibar-public.css/wp-content/plugins/notibar/assets/js/notibar-public.js/wp-content/plugins/notibar/assets/css/notibar-admin.css/wp-content/plugins/notibar/assets/js/notibar-admin.js/wp-content/plugins/notibar/assets/js/notibar-public.js/wp-content/plugins/notibar/assets/js/notibar-admin.jsnotibar/assets/css/notibar-public.css?ver=notibar/assets/js/notibar-public.js?ver=notibar/assets/css/notibar-admin.css?ver=notibar/assets/js/notibar-admin.js?ver=HTML / DOM Fingerprints
njt-notification-bar-wrappernjt-notification-bar-contentnjt-notification-bar-closenotibar-preview-wrapper<!-- Notibar preview start --><!-- Notibar preview end -->data-njt-nofi-iddata-njt-nofi-previewdata-njt-nofi-typenjtNotificationBarDatanjtNotificationBarOptions[njt_notification_bar]