The Announcement & Notification Banner – Bulletin plugin for WordPress has a security issue where attackers can inject harmful code into a website. This can happen if a user clicks on a link that tricks them into performing a certain action. This vulnerability affects all versions up to and including 3.11.7.