Known vulnerabilities in Announcement & Notification Banner – Bulletin

Publish a slick announcement banner notice across your website or Woocommerce shop. Extend with icons, countdowns, placement rules and more!

5Reported vulnerabilities

7.2Highest CVSS score

3.14.0Latest version

2,000+Active installs

What to do now

Update Announcement & Notification Banner – Bulletin to 3.12 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: February 23, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-30478	High 7.2	0.6%	Before 3.9.0	`3.9.0`	March 29, 2024
CVE-2024-10682	Medium 6.1	0.6%	0 to 3.11.7 (inclusive)	`3.12`	November 21, 2024
WF-337d052c-6ee2-4cd0-8a69-a4b66b25517a	Medium 6.4	—	3.5.2 and earlier	`3.5.3`	August 8, 2022
CVE-2023-2067	Medium 5.4	0.3%	3.7.0 and earlier	`3.7.1`	June 9, 2023
CVE-2023-2066	Medium 4.3	0.5%	3.6.0 and earlier	`3.7.0`	June 9, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.