Unpatched CSRF vulnerability flagged by scanners
The plugin has a known cross-site request forgery vulnerability that remains unpatched, and security scanners keep flagging it.
Tier I · Proven The best-established problems.
7 public reports · first reported 13 November 2024 · last reported 28 September 2025
What's going wrong
Many site owners report that security tools flagged this plugin for a cross-site request forgery vulnerability. Reports span from late 2024 through 2025, and several users say the issue was still present in later versions. Jetpack and other scanners warned users to disable the plugin, and some site owners disabled it months ago while waiting for a fix. Users who want to keep their admin notices hidden are left to choose between an insecure plugin and no protection. A reliable way to track advisories and recommend safer alternatives would help these site owners decide quickly.
AI-assisted: written with the help of AI from the reports.
Products affected
Disable Admin Notices – Hide Dashboard Notifications.
Related problems
Who has this problem
2 businesses found.
Unlock them at the top of this page — $38.
All sales are final — no refunds.
Each business's name, the address it published, and the page it was published on. Paid through Stripe; you get a private page to bookmark, with a CSV download.