Sitewide Notice WP
Sitewide Notice WP has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 5.5 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for Sitewide Notice WP has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Sitewide Notice WP is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2021-24592Sitewide Notice WP <= 2.2 - Authenticated Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Sitewide Notice WP
Author
Andrew Lima
Simply add a small message bar to the bottom of each page of your website to display notice messages such as sales, notices and any text messages. A lightweight plugin that simply adds a small notification bar that allows you to insert simple text at the bottom of every page of your website as a call-to-action. Features Lightweight code that does not slow down your website. Choose color of font. (Includes transparency). Choose color of background for the bar. (Includes transparency). Add your own text to the message bar. Users are able to close the bar by clicking on the ‘x’. When a user closes the bar, automatically hide this notification bar for 24 hours. Show/hide notice bar with a checkbox. HTML code supported. Hide sitewide message on mobile devices. Hide sitewide message for logged in users. Integrates with Paid Memberships Pro – show notification banner only to members. Show notification bar either on top or on the bottom of the screen.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C