← Database

CVE-2025-15481

MEDIUM CVSS: 5.3 Published: 2026-09-02 Modified: 2026-09-02

Description

The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails.

Affected Platforms

Unknown

Weakness Type

CWE-306

References