plugin

Sitewide Notice Wp Vulnerabilities

2 known security issues reported for the Sitewide Notice Wp WordPress plugin. Most recent disclosed Dec 15, 2025.

2 medium

Running Sitewide Notice Wp on your site? Check whether your installed version is affected.

Scan your site free

Sitewide Notice WP <= 2.4.1 - Missing Authorization

medium

The Sitewide Notice WP plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.4.1. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:
5.3
Affected:
up to 2.4.1
Fixed in:
2.4.2
Disclosed:
Dec 15, 2025

CVE-2025-67575 on NVD →

Sitewide Notice WP <= 2.2 - Authenticated Stored Cross-Site Scripting

medium

The Sitewide Notice WP WordPress plugin before 2.3 does not sanitise some of its settings before outputting them in frontend pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

CVSS:
5.5
Affected:
up to 2.3
Fixed in:
2.3
Disclosed:
Aug 2, 2021

CVE-2021-24592 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database