Search vulnerabilities

Results 1

Export CSV
CVE-2025-15481

Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure

The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed