CVE-2026-66602

The DevItems HashBar – WordPress Notification Bar plugin is vulnerable to a Cross-Site Request Forgery (CSRF) attack, which could allow an attacker to perform unauthorized actions on behalf of authenticated users. This high-severity vulnerability impacts versions up to 2.0.0 and should be prioritized by all WordPress site administrators using this plugin to mitigate potential exploitation risks.