Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: gfazioli Clear all filters
TI-2026-20197 CVE-2026-25012 · GHSA-g35p-qgfm-w6v2

WordPress WP Bannerize Pro plugin <= 1.11.0 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in gfazioli WP Bannerize Pro wp-bannerize-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Bannerize Pro: from n/a through <= 1.11.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00222 Published 2026-02-03 No fix listed CWE-862
TI-2023-26605 CVE-2023-48775 · GHSA-cq22-f7mv-9c42

WordPress WP CleanFix plugin <= 5.6.2 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00386 Published 2024-12-31 No fix listed CWE-862
TI-2024-06848 CVE-2024-7388 · GHSA-c6cg-7q2c-x256

WP Bannerize Pro <= 1.9.0 - Authenticated (Editor+) Stored Cross-Site Scripting

Priority LOW 18

The WP Bannerize Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via banner alt data in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.0 Network High privileges User interaction EPSS 0.00261 Published 2024-08-13 No fix listed CWE-79