Random Banner

Random Banner has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2024; 2 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 7.1 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (100%).

2 of the records (50%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2024.

3 independent researchers contributed these findings, one record each. Random Banner is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage50%
Open

2

Fixed

2

Get automatic notifications for all Random Banner vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-53787

Random Banner <= 4.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records
Random Banner banner
Latestv4.2.12
4.6(52)
92/100
Last Updated
2026-03-15 (6mo ago)
Active Installs
1,000+
Downloads
121,163
Requires WP
5.3+
Requires PHP
7.0+
Tested up to
WP 6.9.7
Created
2014-01-25 (13y ago)

Random Banner is a flexible WordPress plugin that enables you to display various types of banner ads (Image, SWF, or Script) randomly throughout your website. Whether you’re running ad campaigns or promoting content, this plugin offers powerful placement and control options. Features Supports banner types: Image, SWF, and Script. Assign individual links to Image and SWF banners. Display banners randomly from the list uploaded on the settings page. Use shortcodes or widgets to place banners anywhere. Set custom titles via widget settings. Organize banners using categories. Display banners as sliders via widgets or shortcodes. Enable/disable banners on individual posts. Global enable/disable settings under Settings → Others. Option to hide banners for logged-in users. Show banner ads as popups (Settings → Popup). Filter ads by category when assigning banner locations. Scripts and Styles used Bootstrap SweetAlert Moment.js Owl Carousel Demo View Demo Free Vs Pro Compare Free vs Pro Versions Shortcode Usage In PHP <?php echo do_shortcode('[bc_random_banner]'); ?> Inside Posts or Pages [bc_random_banner] Available Shortcode Attributes [bc_random_banner category=category_name slider=no autoplay=true delay=3000 loop=false dots=false] category: default or any custom category slug. slider: yes / no autoplay: true / false delay: e.g., 3000 (milliseconds) loop: true / false dots: true / false For Pro Version : Random Banner Pro Support

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C