HashBar - Announcement, Notification Bar & Popup Campaign
Healthy: vulnerability published 21 Sep 2026, fixed in 2.0.4.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| devitemsllc | 8 Jan 2018 to 28 Oct 2026, 193 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 7 days ago
- Releases, 24 months
- 31
- Tested up to
- 7.1 current
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 5 |
| Q3 2024 | 3 |
| Q4 2024 | 3 |
| Q1 2025 | 3 |
| Q2 2025 | 2 |
| Q3 2025 | 3 |
| Q4 2025 | 3 |
| Q1 2026 | 5 |
| Q2 2026 | 5 |
| Q3 2026 | 6 |
| Q4 2026 | 2 |
Last release 28 Oct 2026. Tested with WordPress 7.1 (current).
Support
0% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 21 Sep 2026 | HashBar – Announcement, Notification Bar & Popup Campaign <= 2.0.3 - Authenticated (Administrator+) SQL Injection | 4.9 | <= 2.0.3 | 2.0.4 | 0 |
| 18 Aug 2026 | HashBar – Announcement, Notification Bar & Popup Campaign <= 2.0.0 - Cross-Site Request Forgery | 4.3 | <= 2.0.0 | 2.0.1 | 0 |
| 26 Dec 2023 | HashBar – WordPress Notification Bar <= 1.4.1 - Authenticated (Author+) Stored Cross-Site Scripting | 6.4 | < 1.4.2 | 1.4.2 | 0 |
| 27 Dec 2022 | HashBar – WordPress Notification Bar <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | 6.4 | <= 1.3.5 | 1.3.6 | 16 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.2 from 38 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 29 |
|---|---|
| 4 star | 1 |
| 3 star | 1 |
| 2 star | 1 |
| 1 star | 6 |
Momentum
9,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 1,093 |
|---|---|
| 11 May 2026 | 1,069 |
| 18 May 2026 | 3,286 |
| 25 May 2026 | 1,372 |
| 1 Jun 2026 | 878 |
| 8 Jun 2026 | 3,338 |
| 15 Jun 2026 | 3,494 |
| 22 Jun 2026 | 963 |
| 29 Jun 2026 | 3,150 |
| 6 Jul 2026 | 1,668 |
| 13 Jul 2026 | 853 |
| 20 Jul 2026 | 3,408 |
| 27 Jul 2026 | 1,191 |
| 3 Aug 2026 | 1,271 |
| 10 Aug 2026 | 757 |
| 17 Aug 2026 | 4,703 |
| 24 Aug 2026 | 4,014 |
| 31 Aug 2026 | 1,084 |
| 7 Sep 2026 | 849 |
| 14 Sep 2026 | 4,136 |
| 21 Sep 2026 | 5,103 |
| 28 Sep 2026 | 1,102 |
| 5 Oct 2026 | 821 |
| 12 Oct 2026 | 3,595 |
| 19 Oct 2026 | 1,320 |
| 26 Oct 2026 | 4,359 |
| 2 Nov 2026 | 257 |
Weekly downloads over the last 4 weeks are 9% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 2.0.6 |
|---|---|
| Author | DevItems |
| Added | 8 Jan 2018 |
| Last updated | 28 Oct 2026 |
| Active installs | 9,000+ |
| Requires WordPress | 5.3 |
| Tested up to | 7.1.4 |
| Requires PHP | not stated |
| Category | Marketing & Advertising > Email Marketing & Campaigns |
| Tags | popup, lead capture, countdown timer, announcement bar, notification bar |
Other plugins by this author: ShopLentor - All-in-One WooCommerce Growth & Store Enhancement Plugin, HT Mega Addons for Elementor - Elementor Widgets & Template Builder, Support Genix - Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System, Recurio - Ultimate Subscription for WooCommerce, CookieRay - Cookie Banner for Cookie Consent (GDPR/CCPA Compliant), WP Film Studio - WordPress Movie Maker/Production Plugin, HT Politic - For Political WordPress Themes / Website, WP Education - Education WordPress Plugin for Elementor, WP Insurance - WordPress Insurance Service Plugin, HT Blocks - Absolute Gutenberg Blocks, HT Service - Roofing Service WordPress Plugin, CourseGlade LMS - Online Course & eLearning Platform
Questions
Is HashBar - Announcement, Notification Bar & Popup Campaign still maintained?
HashBar - Announcement, Notification Bar & Popup Campaign was last updated on 28 Oct 2026. Its Canary status is Healthy.
Is HashBar - Announcement, Notification Bar & Popup Campaign safe?
HashBar - Announcement, Notification Bar & Popup Campaign has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns HashBar - Announcement, Notification Bar & Popup Campaign?
The wordpress.org author is DevItems. Recent committers: devitemsllc, plugin-master. We have recorded no ownership change.
What can I use instead of HashBar - Announcement, Notification Bar & Popup Campaign?
Plugins in the same category with a higher Canary Score: Announcer - Sticky Message Banner & Notification Bar, SALERT - Social Proof Notifications & Live Sales Popup, Countix Sales Countdown Timer, Countdown Block, WPC Product Timer for WooCommerce.