The Enhanced Text Widget plugin for WordPress is vulnerable to a security issue in versions up to and including 1.6.2. This security issue makes it possible for unauthenticated attackers to alter data without authorization. This can be used to hide admin notifications.