{
 "id": "WPSEC-2026-1108",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1108/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1108/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1108/index.md",
 "title": "Simple Banner <= 3.3.2 - Authenticated (Subscriber+) Privilege Escalation via User Permissions Setting",
 "description": "The Simple Banner plugin for WordPress is vulnerable to Privilege Escalation via the User Permissions setting in all versions up to, and including, 3.3.2, due to the plugin adding the core 'manage_options' capability to every role selected in its 'permissions_array' setting, instead of only a plugin-specific capability. This makes it possible for authenticated attackers whose role has been given Simple Banner access, which can include subscribers, to update arbitrary site options such as 'default_role' and 'users_can_register' and so gain administrator access. Exploitation requires an administrator to have selected the attacker's role in the plugin's User Permissions setting, which is available when the Pro license is active.",
 "plugin": {
  "slug": "simple-banner",
  "name": "Simple Banner",
  "full_name": "Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website",
  "wordpress_org": "https://wordpress.org/plugins/simple-banner/",
  "advisories_url": "https://wpsec.com/vuln/plugin/simple-banner/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/simple-banner"
 },
 "type": "PRIV",
 "cwe": [
  "CWE-269"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 7.5,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "severity": "High"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "3.3.3",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 3.3.3"
  ]
 },
 "introduced_in": null,
 "fixed_in": "3.3.3",
 "remediation": "Update to 3.3.3 or later.",
 "fix_released": "2026-10-15T14:52:12+00:00",
 "published": "2026-10-16T15:51:39+00:00",
 "updated": "2026-10-16T09:49:51.122086+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1108/",
  "https://plugins.svn.wordpress.org/simple-banner/tags/3.3.3/",
  "https://wordpress.org/plugins/simple-banner/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/simple-banner",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-10-16"
 }
}