CVE-2026-96827

Administrator SQL Injection in Admin Notices Manager = 1.6.0 versions...

CVE-2026-96827

The WordPress Admin Notices Manager plugin (versions

CVE-2026-96827 WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability

Administrator SQL Injection in Admin Notices Manager = 1.6.0 versions...

CVE-2026-96827 WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability

Administrator SQL Injection in Admin Notices Manager = 1.6.0 versions...

EUVD-2026-89879

Administrator SQL Injection in Admin Notices Manager = 1.6.0 versions...

PT-2026-103211

Administrator SQL Injection in Admin Notices Manager = 1.6.0 versions...

CVE-2026-96827: Improper Neutralization of Special Elements used in an SQL Command

Administrator SQL Injection in Admin Notices Manager = 1.6.0 versions...

WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Admin Notices Manager versions = 1.6.0...

CVE-2024-1717

The Admin Notices Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handleajaxcall function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

CVE-2024-1717 Admin Notices Manager <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval

The Admin Notices Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handleajaxcall function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

CVE-2024-1717 Admin Notices Manager <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval

The Admin Notices Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handleajaxcall function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

WordPress Admin Notices Manager plugin <= 1.4.0 - Missing Authorization to Authenticated User Email Retrieval vulnerability

Missing Authorization to Authenticated User Email Retrieval vulnerability discovered by Lucio Sá in WordPress Plugin Admin Notices Manager versions = 1.4.0...

WordPress Admin Notices Manager Plugin <= 1.4.0 is vulnerable to Broken Access Control

Software Admin Notices Manager Type Plugin Vulnerable versions = 1.4.0 Fixed in 1.5.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1717 Patch priority Low CVSS severity Low 4.3 Developer Melapress PSID 95224798df4d Credits Lucio Sá Required privilege...

CVE-2024-1717: Missing Authorization

The Admin Notices Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handleajaxcall function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

PT-2024-18247

Name of the Vulnerable Software and Affected Versions Admin Notices Manager plugin for WordPress versions up to, and including, 1.4.0 Description The issue is related to unauthorized access of data due to a missing capability check on the handle ajax call function. This allows authenticated...