CVE-2026-28153

The Notification Master plugin for WordPress versions up to 1.7.1 is vulnerable to unauthenticated broken access control, allowing attackers to exploit this weakness to access sensitive data or perform unauthorized actions. This high-severity vulnerability poses a significant risk to WordPress sites utilizing the plugin, making it essential for site administrators and security teams to prioritize immediate updates or mitigations.