WordPress Plugin Vulnerabilities

Simple Banner < 3.3.3 - Authenticated Privilege Escalation via User Permissions Setting

Description

The plugin does not correctly limit the capabilities it grants to the user roles an administrator allows to manage its banners, granting such roles the full administrator capability, which allows users in a low-privileged role to escalate their privileges and fully compromise the site.

Proof of Concept

Affects Plugins

Plugin icon
simple-banner
Fixed in 3.3.3

References

CVE
CVE-2026-107506

Classification

Type
PRIVESC
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-269
CVSS
7.5 (high)

Miscellaneous

Original Researcher
Jakub Herman
Submitter
Jakub Herman
Submitter website
https://jakubherman.net
Verified
Yes
WPVDB ID
8123f94c-0f46-4123-ae13-c2d5474476b2

Timeline

Publicly Published
2026-10-19 (about 2 days ago)
Added
2026-10-19 (about 1 day ago)
Last Updated
2026-10-20 (about 8 hours ago)

Other

Published
Title
Published
2026-10-09
Title
Tonda Membership <= 1.0.1 - Unauthenticated Privilege Escalation
Published
2026-07-07
Title
Backstage <= 1.4.2 - Unauthenticated Privilege Escalation via Permissive Demo Role Capabilities
Published
2026-09-11
Title
MemberPress Corporate Accounts < 1.6.0 - Authenticated (Subscriber+) Privilege Escalation via Mass Assignment in Sub-Account Creation
Published
2023-08-08
Title
Real Estate Manager <= 7.2 - Subscriber+ Privilege Escalation
Published
2023-07-31
Title
Shop as a Customer for WooCommerce < 1.2.4 - Shop Manager+ Privilege Escalation