Skip to content

Vendor

banner effect header project vulnerabilities

2 published CVES affecting banner effect header project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of banner effect header project alerts

Products

Latest banner effect header project CVEs

Newest publication first

  1. CVE-2015-1384 Banner Effect Header < 1.2.8 - Cross-Site Scripting

    Published
    MediumCVSS 4.3 EPSS 2.0%

    Cross-site scripting (XSS) vulnerability in the Banner Effect Header plugin before 1.2.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the banner_effect_divid parameter in the BannerEffectOptions page to wp-admin/options-general.php.

  2. CVE-2015-0920 Banner Effect Header <= 1.2.7 - Cross-Site Request Forgery

    Published
    MediumCVSS 6.8 EPSS 1.2%

    Cross-site request forgery (CSRF) vulnerability in the Banner Effect Header plugin 1.2.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the banner_effect_email parameter in the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.