High · 7.6 CVE-2026-96827 EUVD-2026-89879GHSA-76gp-v38g-46gm

WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Vendor: melapress Product: Admin Notices Manager

Description

Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.

Affected products

Vendor	Product	Affected	Fixed
Melapress	Admin Notices Manager	≤ 1.6.0	—

References

https://patchstack.com/database/wordpress/plugin/admin-notices-manager/vulnerability/wordpress-admin-notices-manager-plugin-1-6-0-sql-injection-vulnerability?_s_id=cve vdb-entry