5.3
Medium
CVE-2025-15481 The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses…
Description
The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Notification Bar for WordPress 1.1 | earliest → 1.1.8 | No fix stated |