WordPress plugin
Notification Bar for WordPress security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium1
- Low0
All Notification Bar for WordPress vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Information Exposure ≤1.1.8No patch available | CVE-2025-15481 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.1.8No patch available | CVE-2022-29476 |
- Medium5.3Unauthenticated Information Exposure
≤1.1.8No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.1.8No patch available
Notification Bar for WordPress: common questions
Does Notification Bar for WordPress have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Notification Bar for WordPress: 1 high, 1 medium. At least one is not fixed in the latest version.
How do I check which version of Notification Bar for WordPress I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Notification Bar for WordPress vulnerability?
CVE-2025-15481, published Jan 8, 2026: Notification Bar for WordPress <= 1.1.8 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).
Is any Notification Bar for WordPress vulnerability listed in CISA KEV?
No. None of the known Notification Bar for WordPress vulnerabilities is currently listed in the CISA KEV catalog.