CVE-2024-31261

ALTO 8.8CVE-2024-31261 · Published 09/06/2024 · updated 17/06/2026

In breve

CVE-2024-31261 è una vulnerabilità ALTO (CVSS 8.8) che riguarda announcer (aakashweb).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.32%, superiore al 25.5% delle vulnerabilità.
Correzione: aggiornare a 6.0.1 o successiva.

Package	Affected versions	Patched versions
announcer aakashweb	`< 6.0.1`	`6.0.1`

Description

Missing Authorization vulnerability in Aakash Chakravarthy Announcer – Notification & message bars.This issue affects Announcer – Notification & message bars: from n/a through 6.0.

References

patchstack.com/database/vulnerability/announcer/wordpress-announcer-notification-message-bars-plugin-6-0-broken-access-control-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free