WordPress Plugin Vulnerabilities
Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure
Description
The plugin exposes an unauthenticated CSV export script that discloses all stored subscriber emails.
Proof of Concept
Affects Plugins
No known fix References
CVE
Classification
Type
SQLI
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Khaled Alenazi (Nxploited)
Submitter
Khaled Alenazi (Nxploited)
Submitter website
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2026-01-08 (about 7 months ago)
Added
2026-01-08 (about 7 months ago)
Last Updated
2026-01-08 (about 7 months ago)
WPScan 