WordPress Ad Inserter <2.7.10 - Cross-Site Scripting

WordPress Ad Inserter plugin before 2.7.10 contains a cross-site scripting vulnerability. It does not sanitize and escape the htmlelementselection parameter before outputting it back in the page. id: CVE-2022-0288 info: name: WordPress Ad Inserter 2.7.10 - Cross-Site Scripting author: DhiyaneshDK...

WordPress Ad Inserter – Ad Manager & AdSense Ads plugin <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Kuba in WordPress Plugin Ad Inserter versions = 2.8.19...

CVE-2026-105077

Unauthenticated Cross Site Scripting XSS in Ad Inserter = 2.8.19 versions...

EUVD-2026-114298

Unauthenticated Cross Site Scripting XSS in Ad Inserter = 2.8.19 versions...

CVE-2026-105077 WordPress Ad Inserter plugin <= 2.8.19 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ad Inserter = 2.8.19 versions...

CVE-2026-105077

The WordPress Ad Inserter plugin versions

CVE-2026-102905

The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.8.19 This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This...

EUVD-2026-114224

The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.8.19 This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This...

CVE-2026-102905

The Ad Inserter plugin for WordPress (all versions up to and including 2.8.19 ) is vulnerable to unauthenticated arbitrary shortcode execution via the 's' search parameter . The root cause is the software's failure to properly validate a value before executing the do_shortcode function. This allo...

CVE-2026-102905 Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter

The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.8.19 This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This...

CVE-2026-102905 Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter

The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.8.19 This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This...

CVE-2026-105077: Spacetime Ad Inserter: Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 versions.

Unauthenticated Cross Site Scripting XSS in Ad Inserter = 2.8.19 versions...

CVE-2026-102905: spacetime Ad Inserter – Ad Manager & AdSense Ads: The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in…

The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.8.19 This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This...

CVE-2026-118094

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Igor Funa Ad Inserter ad-inserter allows Stored XSS.This issue affects Ad Inserter: from n/a through 2.8.18...

CVE-2026-118094 WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Igor Funa Ad Inserter ad-inserter allows Stored XSS.This issue affects Ad Inserter: from n/a through 2.8.18...

EUVD-2026-112800

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Igor Funa Ad Inserter ad-inserter allows Stored XSS.This issue affects Ad Inserter: from n/a through 2.8.18...

CVE-2026-118094

The Ad Inserter WordPress plugin (versions up to and including 2.8.18 ) is vulnerable to Stored Cross-Site Scripting (XSS) . This issue stems from the Improper Neutralization of Input During Web Page Generation , allowing an attacker to inject malicious scripts that are subsequently stored and ex...

WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Deva Parekh in WordPress Plugin Ad Inserter versions = 2.8.18...

CVE-2026-114709

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Igor Funa Ad Inserter ad-inserter allows Reflected XSS.This issue affects Ad Inserter: from n/a through 2.8.18...

CVE-2026-114709

The Igor Funa Ad Inserter plugin for WordPress (versions up to and including 2.8.18 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . This flaw stems from the Improper Neutralization of Input During Web Page Generation , allowing an attacker to inject malicious scripts into web pages. The...