Medium · 5.3 CVE-2026-25012 EUVD-2026-5256GHSA-g35p-qgfm-w6v2

WordPress WP Bannerize Pro plugin <= 1.11.0 - Broken Access Control vulnerability

Published Feb 3, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: gfazioli Product: WP Bannerize Pro

Description

Missing Authorization vulnerability in gfazioli WP Bannerize Pro wp-bannerize-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Bannerize Pro: from n/a through <= 1.11.0.

Affected products

Vendor	Product	Affected	Fixed
gfazioli	WP Bannerize Pro	≤ 1.11.0	—

References

https://patchstack.com/database/Wordpress/Plugin/wp-bannerize-pro/vulnerability/wordpress-wp-bannerize-pro-plugin-1-11-0-broken-access-control-vulnerability?_s_id=cve vdb-entry