CVE-2026-28153: Notification Master – Real-Time WordPress Notifications With Email, Sms, Webhooks & More
High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.
Unauthenticated Broken Access Control in Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More <= 1.7.1 versions.
Affected products
- Notification Master Notification Master – Real-Time WordPress Notifications With Email, Sms, Webhooks & More: up to and including 1.7.1
Published 2026-08-24. Last modified 2026-08-24.