CVE-2024-1716: LITONICE13 Admin Bar Editor – Toolbar Customization With User Role Based Access & Custom Menus

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The Admin Bar Remover plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_form() function in all versions up to, and including, 1.0.2.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to enable or disable the admin bar on the front-end of the site.

Affected products

• LITONICE13 Admin Bar Editor – Toolbar Customization With User Role Based Access & Custom Menus: up to and including 1.0.2.2

Published 2024-05-02. Last modified 2026-06-17.