Skip to content
OpenAdvisories

Vendor

mikewire_rocksolid

3 known vulnerabilities.

Products

Announcement & Notification Banner – Bulletin 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-10682

    Bulletin Announcements <= 3.11.7 - Reflected Cross-Site Scripting

    The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg and remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.11.7. T…

    mikewire_rocksolid Announcement & Notification Banner – Bulletin Web / CMS
  • Medium 6.3
    CVE-2023-2066

    Announcement & Notification Banner – Bulletin <= 3.6.0 - Missing Authorization Checks

    The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'bulletinwp_update_bulletin_status', 'bulletinwp_update_bulletin', 'bulletinwp_update…

    mikewire_rocksolid Announcement & Notification Banner – Bulletin Web / CMS
  • Medium 6.3
    CVE-2023-2067

    Announcement & Notification Banner – Bulletin <= 3.7.0 - Cross-Site Request Forgery

    The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce validation on the 'bulletinwp_update_bulletin_status', 'bulletinwp_update_bulletin', 'bulletinwp_update_settings', 'bulle…

    mikewire_rocksolid Announcement & Notification Banner – Bulletin Web / CMS