128 matches found
CVE-2025-15481
The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails...
CVE-2025-15481 Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure
The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails...
CVE-2025-15481
The Notification Bar for WordPress plugin (slug 8-degree-notification-bar) through version 1.1.8 exposes an unauthenticated CSV export script at inc/backend/blocks/export-csv.php, allowing anyone to download all stored subscriber email addresses without authentication. The vulnerability is rated ...
CVE-2025-15481 Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure
The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails...
EUVD-2025-210829
The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails...
EUVD-2026-62209
Cross-Site Request Forgery CSRF vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0...
CVE-2026-66602
Cross-Site Request Forgery CSRF vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0...
PT-2026-78248
Name of the Vulnerable Software and Affected Versions HashBar – WordPress Notification Bar versions prior to 2.0.1 Description Cross-Site Request Forgery CSRF in DevItems HashBar – WordPress Notification Bar allows an attacker to induce a user to perform actions they did not intend to do. CSRF is...
CVE-2025-9895
The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the 'subscriber-list-empty.php' file. This makes it possible for unauthenticated attackers to empty the subscrib...
WordPress Notification Bar plugin <= 2.2 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by Nabil Irawan in WordPress Plugin Notification Bar versions = 2.2...
EUVD-2023-56093
Malicious code in bioql PyPI...
EUVD-2024-16418
Malicious code in bioql PyPI...
EUVD-2022-3324
Malicious code in bioql PyPI...
EUVD-2025-2896
Malicious code in bioql PyPI...
EUVD-2024-35407
Malicious code in bioql PyPI...
EUVD-2025-32253
Malicious code in bioql PyPI...
EUVD-2025-8781
Malicious code in bioql PyPI...
EUVD-2024-31639
Malicious code in bioql PyPI...