Skip to content
OpenAdvisories
High · 7.6 CVE-2024-30478 EUVD-2024-28398GHSA-9pvw-c3qw-6hwh

WordPress Announcement & Notification Banner – Bulletin plugin <= 3.8.5 - SQL Injection vulnerability

Published Mar 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bulletin WordPress Announcement & Notification Banner Plugin – Bulletin.This issue affects WordPress Announcement & Notification Banner Plugin – Bulletin: from n/a through 3.8.5.

Affected products

VendorProductAffectedFixed
Bulletin WordPress Announcement & Notification Banner Plugin – Bulletin ≤ 3.8.5 —

References