WP Bannerize Pro

WP Bannerize Pro has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 5.2, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Missing Authorization, Server-Side Request Forgery (SSRF).

Every one of the 4 issues recorded for WP Bannerize Pro has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each. WP Bannerize Pro is installed on roughly 800 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.2/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all WP Bannerize Pro vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2023-41663

WP Bannerize Pro <= 1.6.9 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records
WP Bannerize Pro banner
Latestv1.13.1

WP Bannerize Pro

gfazioli

Author

gfazioli

4.9(10)
98/100
Last Updated
2026-05-26 (4mo ago)
Active Installs
800+
Downloads
45,445
Requires WP
6.2+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2016-11-28 (10y ago)

Bannerize is a WordPress plugin for creating and managing advertising banners with built-in analytics. Create image, HTML, or text banners, organize them into campaigns, and track impressions, clicks, and click-through rates to measure the effectiveness of your advertising. For full documentation, visit the Bannerize website. Banner Types Image Banners — Upload from your WordPress media library or link to external image URLs HTML Banners — Use the rich text editor to create custom HTML, embed third-party ad code, iframes, or video players Text Banners — Simple text-based banners with full formatting support Display Methods Gutenberg Block — Native block editor integration with campaign and banner selection Shortcode — [wp_bannerize_pro] with filtering by campaign, order, layout, device, and geolocation Widget — Dedicated sidebar widget with all configuration options PHP Function — wp_bannerize_pro() and get_wp_bannerize_pro() for theme templates Analytics Impressions Tracking — Records every banner view with timestamp, referrer, IP, and user agent Clicks Tracking — Records every banner click with the same contextual data CTR Calculation — Automatic click-through rate computation Trend Charts — Visualize performance over time (hourly, daily, weekly, monthly) Top Performers — Rankings of best-performing banners and campaigns Export — Download analytics data in CSV or SQL format Auto Cleanup — Configurable data retention policies Advanced Features Campaigns — Organize banners into campaigns for grouped display and filtering Scheduling — Set start and end dates for time-limited promotions Performance Limits — Set maximum impressions and clicks per banner Drag & Drop Sorting — Reorder banners with ease Device Targeting — Show banners only on mobile or desktop Geolocation — Target banners by visitor country (via IPStack) User Roles — Three built-in roles: Banners Manager, Campaigns Manager, Campaigns Viewer Custom Templates — Override banner and campaign archive templates Dashboard Widget A compact dashboard widget showing key banner performance metrics at a glance.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C