WordPress Advanced Ads plugin <= 2.0.14 - Authenticated (Editor+) Remote Code Execution via Shortcode vulnerability

Authenticated Editor+ Remote Code Execution via Shortcode vulnerability discovered by NosleeP++ in WordPress Plugin Advanced Ads versions = 2.0.14...

WordPress plugin Advanced Ads 代码注入漏洞

WordPress Advanced Ads is an ad management plugin for WordPress designed to help website owners manage, optimize, and monetize their websites efficiently. WordPress Advanced Ads suffers from a code execution vulnerability that arises due to insufficient validation of user input by the...

CVE-2025-13592: Improper Control of Generation of Code

The Advanced Ads plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.0.14 via the 'change-adcontent' shortcode parameter. This allows authenticated attackers with editor-level permissions or above, to execute code on the server...

PT-2025-53776

Name of the Vulnerable Software and Affected Versions Advanced Ads versions prior to 2.0.15 Description The Advanced Ads plugin for WordPress is susceptible to Remote Code Execution through the change-ad content shortcode parameter. This allows authenticated attackers with editor-level permission...

Nomani Investment Scam Surges 62% Using AI Deepfake Ads on Social Media

The fraudulent investment scheme known as Nomani has witnessed an increase by 62%, according to data from ESET, as campaigns distributing the threat have also expanded beyond Facebook to include other social media platforms, such as YouTube. The Slovak cybersecurity company said it blocked over...

SEC Files Charges Over $14 Million Crypto Scam Using Fake AI-Themed Investment Tips

The U.S. Securities and Exchange Commission SEC has filed charges against multiple companies for their alleged involvement in an elaborate cryptocurrency scam that swindled more than $14 million from retail investors. The complaint charged crypto asset trading platforms Morocoin Tech Corp., Berge...

Malicious code in @ads-core/types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c87d0a891128398685bb290e3aeec3ffa92b924ed73e196f11216f332a5ba071 The package @ads-core/types was found to contain malicious code...

EUVD-2025-204953

Malicious code in @ads-core/types npm...

MAL-2025-192700 Malicious code in @ads-core/types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c87d0a891128398685bb290e3aeec3ffa92b924ed73e196f11216f332a5ba071 The package @ads-core/types was found to contain malicious code...

14 Malicious NuGet Packages Found Stealing Crypto Wallets and Ad Data

ReversingLabs discovers 14 malicious NuGet packages, including Netherеum.All, using homoglyphs and fake downloads to steal crypto wallets and Google Ads data...

Fake Microsoft Teams and Google Meet Downloads Spread Oyster Backdoor

The Oyster backdoor also known as Broomstick is targeting the financial world, using malicious search ads for PuTTY, Teams, and Google Meet...

Police Dismantle EUR 700 Million Crypto Scam That Used Deepfakes

Europol and Eurojust led a massive international police operation that successfully dismantled a crypto fraud network that laundered over €700M using deepfake ads...

CVE-2025-62593 Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack

Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense us...

Malicious code in quickswap-ads-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a51e9188f2b9786cc34efba72bae1dbcf1b659db890a4b5d133a8b94ea60c13 The package quickswap-ads-list was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199358

Malicious code in quickswap-ads-list npm...

MAL-2025-191404 Malicious code in quickswap-ads-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a51e9188f2b9786cc34efba72bae1dbcf1b659db890a4b5d133a8b94ea60c13 The package quickswap-ads-list was found to contain malicious code. Source: ghsa-malware...

CVE-2025-7402

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘siteid’ parameter in all versions up to, and including, 4.95 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

CVE-2025-7402 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_id

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘siteid’ parameter in all versions up to, and including, 4.95 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

EUVD-2025-198609

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘siteid’ parameter in all versions up to, and including, 4.95 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

CVE-2025-7402 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_id

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘siteid’ parameter in all versions up to, and including, 4.95 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...