Unauthenticated CSV Export Discloses Subscriber Emails in WordPress Notification Bar

Executive Summary

This vulnerability is in the Notification Bar for WordPress plugin up to version 1.1.8. It allows unauthenticated access to a CSV export feature that exposes all stored subscriber emails without requiring login credentials.

Useful 0 Not Useful 0

Detection Guidance

Check if the vulnerable plugin is installed by looking for the 'Notification Bar for WordPress' plugin in your WordPress admin panel or via file system checks. Attempt to access the CSV export endpoint directly by visiting a URL path like /wp-content/plugins/notification_bar/export/csv.php or similar plugin-specific paths. If subscriber emails are exposed without authentication, the vulnerability is present.

Useful 0 Not Useful 0

Impact Analysis

An attacker could access and download all subscriber email addresses stored in the plugin, leading to potential privacy breaches, spam campaigns, or phishing attacks targeting those users.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate GDPR by exposing personal data without consent and failing to protect user information. It may also breach HIPAA if subscriber emails are linked to protected health information.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately disable or uninstall the 'Notification Bar for WordPress' plugin if installed. Remove any exposed subscriber data from public access. Monitor for unauthorized access attempts or data leaks. Consider implementing web application firewalls to block requests to the vulnerable export endpoint. Since no official patch exists, removal is the primary mitigation.

Useful 0 Not Useful 0