PLUGIN SECURITY
Is Simple Banner safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Simple Banner WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
simple-banner - Max supported PHP (analyzed): 8.4
Known vulnerabilities
- Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website [simple-banner] < 2.10.4 [CVE-2021-24574, WordPress Simple Banner plugin <= 2.10.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability, Simple Banner <= 2.10.3 - Authenticated (Admin+) Stored Cross-Site Scripting, Simple Banner < 2.10.4 - Admin+ Stored XSS]
- Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website [simple-banner] < 2.12.0 [CVE-2022-2515, WordPress Simple Banner plugin <= 2.11.0 – Authenticated Stored Cross-Site Scripting (XSS) vulnerability, Simple Banner <= 2.11.0 - Authenticated Stored Cross-Site Scripting, Simple Banner < 2.12.0 - Admin+ Stored Cross-Site Scripting]
- Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website [simple-banner] < 2.12.0 [CVE-2022-0446, Simple Banner <= 2.11.0 - Authenticated (Administrator+) Stored Cross-Site Scripting, Simple Banner < 2.12.0 - Admin+ Stored Cross Site Scripting]
- Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website [simple-banner] < 3.0.4 [CVE-2024-12769, WordPress Simple Banner Plugin < 3.0.4 is vulnerable to Cross Site Scripting (XSS), Simple Banner <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting, EUVD-2024-54512]
- Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website [simple-banner] < 3.0.5 [CVE-2024-13898, Simple Banner <= 3.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting, EUVD-2025-9686]
+ 1 more known vulnerability
- Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website [simple-banner] < 3.1.0 [CVE-2025-12033, Simple Banner <= 3.0.10 - Authenticated (Admin+) Stored Cross-Site Scripting]
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- CookieAdmin – Cookie Consent Banner — 400000+ active installs — max PHP 8.4
- Image Widget — 100000+ active installs — max PHP 8.4
- AdRotate Banner Manager — 20000+ active installs — max PHP 8.4
- Quads Ads Manager for Google AdSense — 20000+ active installs
- Top Bar — 10000+ active installs — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.