WordPress plugin
Hero Banner Ultimate security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium1
- Low0
All Hero Banner Ultimate vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Author+) Local File Inclusion ≤1.4.4Update to 1.4.5 | CVE-2025-22305 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes ≤1.3.4Update to 1.4 | CVE-2022-45818 |
- High8.8Authenticated (Author+) Local File Inclusion
≤1.4.4Update to 1.4.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
≤1.3.4Update to 1.4
Hero Banner Ultimate: common questions
Does Hero Banner Ultimate have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Hero Banner Ultimate: 1 high, 1 medium. None are known to affect version null.
How do I check which version of Hero Banner Ultimate I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Hero Banner Ultimate vulnerability?
CVE-2025-22305, published Jan 6, 2025: Hero Banner Ultimate <= 1.4.4 - Authenticated (Author+) Local File Inclusion. Severity: High (CVSS 8.8).
Is any Hero Banner Ultimate vulnerability listed in CISA KEV?
No. None of the known Hero Banner Ultimate vulnerabilities is currently listed in the CISA KEV catalog.