PT-2026-84710

CVE-2025-15481

Published

2026-09-02

Updated

2026-09-02

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Notification Bar for WordPress versions prior to 1.1.9

Description The plugin exposes an unauthenticated CSV export script that allows the disclosure of all stored subscriber email addresses.

Recommendations Update the plugin to a version newer than 1.1.8.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾