Skip to content
OpenAdvisories
High · 8.8 CVE-2026-66602 EUVD-2026-62209GHSA-g9fq-59hq-pppw

WordPress HashBar – WordPress Notification Bar plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Published Aug 18, 2026 · Updated Aug 19, 2026 · Assigned by Patchstack

Vendor: DevItems Product: HashBar – WordPress Notification Bar Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery.

This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0.

Affected products

VendorProductAffectedFixed
DevItems HashBar – WordPress Notification Bar ≤ 2.0.0 —

References