8.8 High

CVE-2026-66602 Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site…

Description

Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0.

Affected products and versions

Product	Affected versions	Fixed in
HashBar – WordPress Notification Bar 2.0	earliest → 2.0.0	No fix stated

The 2 CVEs of HashBar – WordPress Notification Bar →

CVE-2026-94117 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar –… 7.6 High

Do you use HashBar – WordPress Notification Bar?

Track this CVE Watch HashBar – WordPress Notification Bar Check my SBOMs

www.cveye.io/en/cve/CVE-2026-66602

Timeline

Published August 18, 2026
Last modified August 19, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2026-66602 Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site…

Description

Affected products and versions

Other CVEs of HashBar – WordPress Notification Bar