CVE-2024-10113

🗓️ 15 Nov 2024 05:30:54Reported by WordfenceType

Vulnerability in WP AdCenter plugin allows Contributor+ users to inject Stored Cross-Site Scripting via wpadcenter_ad Shortcod

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-10113	15 Nov 202405:32	–	circl
CNNVD	WordPress plugin WP AdCenter – Ad Manager & Adsense Ads 跨站脚本漏洞	15 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-10113 WP AdCenter – Ad Manager & Adsense Ads <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpadcenter_ad Shortcode	15 Nov 202405:30	–	cvelist
EUVD	EUVD-2024-32910	3 Oct 202520:07	–	euvd
NVD	CVE-2024-10113	15 Nov 202406:15	–	nvd
OSV	CVE-2024-10113	15 Nov 202406:15	–	osv
Patchstack	WordPress WP AdCenter plugin <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpadcenter_ad Shortcode vulnerability	3 Feb 202612:19	–	patchstack
RedhatCVE	CVE-2024-10113	23 May 202508:19	–	redhatcve
Vulnrichment	CVE-2024-10113 WP AdCenter – Ad Manager & Adsense Ads <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpadcenter_ad Shortcode	15 Nov 202405:30	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (November 11, 2024 to November 17, 2024)	21 Nov 202415:38	–	wordfence

NVD

Vulners

Node

wpeka wp_adcenterRange≤2.5.7wordpress

[
  {
    "vendor": "wpeka-club",
    "product": "WP AdCenter – Ad Manager & Adsense Ads",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.5.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/wpadcenter/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/0597a63d-2627-477f-874a-c35b6df7afd5
plugins	www.plugins.trac.wordpress.org/changeset

08 Apr 2026 17:17Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.15.4 - 6.4

EPSS0.00195

SSVC

CWE-79