CVE-2026-66602

Name of the Vulnerable Software and Affected Versions HashBar – WordPress Notification Bar versions prior to 2.0.1

Description Cross-Site Request Forgery (CSRF) in DevItems HashBar – WordPress Notification Bar allows an attacker to induce a user to perform actions they did not intend to do. CSRF is a flaw where a malicious website causes a user's web browser to perform an unwanted action on a different website where the user is currently authenticated.

Recommendations Update HashBar – WordPress Notification Bar to version 2.0.1 or later.