Read the docs

Bulletin

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Bulletin records in CISA KEV

No Bulletin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Announcement & Notification Banner - Bulletin 2 records LOW

Records

3 records

TI-2024-20202 CVE-2024-30478 · GHSA-9pvw-c3qw-6hwh

WordPress Announcement & Notification Banner – Bulletin plugin <= 3.8.5 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bulletin WordPress Announcement & Notification Banner Plugin – Bulletin.This issue affects WordPress Announcement & No…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00574 Published 2024-03-29 No fix listed CWE-89
TI-2023-01943 CVE-2023-2066 · GHSA-4gjm-9g8f-35g5

Announcement & Notification Banner – Bulletin <= 3.6.0 - Missing Authorization Checks

Priority LOW 29

The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'bulletinwp_update_bulletin_status', 'bulletin…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00505 Published 2023-06-09 No fix listed CWE-862
TI-2023-01944 CVE-2023-2067 · GHSA-c2m7-x544-f5mw

Announcement & Notification Banner – Bulletin <= 3.7.0 - Cross-Site Request Forgery

Priority LOW 28

The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce validation on the 'bulletinwp_update_bulletin_status', 'bulletinwp_update_bulletin…

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00288 Published 2023-06-09 No fix listed CWE-352
Open these records in search →