https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:59:47.873254+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-2066 CVE-2023-2066 — Announcement & Notification Banner – Bulletin <= 3.6.0 - Missing Authorization Checks 2026-10-06T18:59:47.889272+00:00

Affected: mikewire_rocksolid Announcement & Notification Banner – Bulletin

The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'bulletinwp_update_bulletin_status', 'bulletinwp_update_bulletin', 'bulletinwp_update_settings', 'bulletinwp_update_status', 'bulletinwp_export_bulletins', and 'bulletinwp_import_bulletins' functions functions in versions up to, and including, 3.6.0. This makes it possible for authenticated attackers with subscriber-level access, and above, to modify the plugin's settings, modify bulletins, create new bulletins, and more.