Description
The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Notification Bar for WordPress | ≤ 1.1.8 | — |
References
- https://wpscan.com/vulnerability/a5fb18fa-be2c-41a5-81ef-ca27de024d34/ exploit vdb-entry technical-description