The Announcement & Notification Banner – Bulletin plugin for WordPress has a security issue that could let an attacker with a subscriber-level access, or higher, to change the plugin’s settings, modify bulletins, create new bulletins, and more. This vulnerability exists in all versions up to and including 3.6.0.