Rusty Top Bar Security & Risk Analysis

wordpress.org/plugins/rusty-top-bar

A simple, easy to use notifcation bar for your website.

10 active installs v1.1 PHP + WP 2.8+ Updated Unknown
barmessagenotificationtoptopbar
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Rusty Top Bar Safe to Use in 2026?

Generally Safe

Score 100/100

Rusty Top Bar has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The plugin 'rusty-top-bar' v1.1 exhibits a strong security posture based on the static analysis. The absence of any AJAX handlers, REST API routes, shortcodes, or cron events with unprotected entry points significantly minimizes its attack surface. The code also demonstrates good practices by utilizing prepared statements for all SQL queries, avoiding file operations and external HTTP requests, and performing a nonce check. While the output escaping is not perfect, with 6% of outputs not being properly escaped, this is a minor concern given the limited attack vectors.

Key Concerns

  • Some outputs are not properly escaped
Vulnerabilities
None known

Rusty Top Bar Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Rusty Top Bar Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
17 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

94% escaped18 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
rusty_topbar_interface (rusty-topbar.php:151)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Rusty Top Bar Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 4
actionadmin_menurusty-topbar.php:29
actionadmin_enqueue_scriptsrusty-topbar.php:30
actionwp_headrusty-topbar.php:32
actionwp_footerrusty-topbar.php:33
Maintenance & Trust

Rusty Top Bar Maintenance & Trust

Maintenance Signals

WordPress version tested5.4.19
Last updatedUnknown
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Rusty Top Bar Developer Profile

RustyBadRobot

3 plugins · 20 total installs

87
trust score
Avg Security Score
90/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Rusty Top Bar

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/rusty-top-bar/style.css
Script Paths
/wp-content/plugins/rusty-top-bar/jquery.custom.js

HTML / DOM Fingerprints

CSS Classes
rusty-bannerrusty-holderrusty-wrap
Data Attributes
data-activedata-scrolldata-textdata-backgrounddata-color
JS Globals
topBarnewSpan
FAQ

Frequently Asked Questions about Rusty Top Bar