Random Banner
Random Banner has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2024; 2 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 7.1 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 4 of the records (100%).
2 of the records (50%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2024.
3 independent researchers contributed these findings, one record each. Random Banner is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2024-53787Random Banner <= 4.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Random Banner
Author
M A Vinoth Kumar
Random Banner is a flexible WordPress plugin that enables you to display various types of banner ads (Image, SWF, or Script) randomly throughout your website. Whether you’re running ad campaigns or promoting content, this plugin offers powerful placement and control options. Features Supports banner types: Image, SWF, and Script. Assign individual links to Image and SWF banners. Display banners randomly from the list uploaded on the settings page. Use shortcodes or widgets to place banners anywhere. Set custom titles via widget settings. Organize banners using categories. Display banners as sliders via widgets or shortcodes. Enable/disable banners on individual posts. Global enable/disable settings under Settings → Others. Option to hide banners for logged-in users. Show banner ads as popups (Settings → Popup). Filter ads by category when assigning banner locations. Scripts and Styles used Bootstrap SweetAlert Moment.js Owl Carousel Demo View Demo Free Vs Pro Compare Free vs Pro Versions Shortcode Usage In PHP <?php echo do_shortcode('[bc_random_banner]'); ?> Inside Posts or Pages [bc_random_banner] Available Shortcode Attributes [bc_random_banner category=category_name slider=no autoplay=true delay=3000 loop=false dots=false] category: default or any custom category slug. slider: yes / no autoplay: true / false delay: e.g., 3000 (milliseconds) loop: true / false dots: true / false For Pro Version : Random Banner Pro Support
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C