CVE-2025-15481

The Notification Bar for WordPress plugin versions up to 1.1.8 contains an unauthenticated CSV export script that allows attackers to access and disclose all stored subscriber email addresses. This vulnerability poses a medium risk, as it can lead to unauthorized access to sensitive user data, potentially facilitating spam or phishing attacks. WordPress site administrators using this plugin should prioritize patching to mitigate the risk of data exposure.