CVE Catalog
CVE-2025-15481
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.19%
8th percentile - higher than 8% of all known CVEs
Summary
The Notification Bar WordPress plugin through version 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails.
Risk Assessment
An unauthorized attacker can download the list of subscriber email addresses, violating privacy and potentially enabling phishing campaigns.
Recommendation
Update the Notification Bar plugin to the latest version or remove it if not essential, and restrict access to the export script.
Other vulnerabilities in Notification Bar
Original NVD description (English source)
The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS