CVE-2025-15481
Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure
The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails.
CVSS 3.1 · 5.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products