CVE-2025-15481 — Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure
The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails.
Published: 2026-09-02 · CVSS: 5.3 · CVSS 3.1
The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7