Lucene search
+L

217 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:37 a.m.12 views

CVE-2024-2073

A vulnerability has been found in SourceCodester Block Inserter for Dynamic Content 1.0 and classified as critical. This vulnerability affects unknown code of the file viewpost.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has...

8.8CVSS7.6AI score0.00692EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:57 a.m.10 views

CVE-2023-4668

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated attackers to extract sensitive data including installed plugins present and active, active theme,...

7.5CVSS5.9AI score0.00512EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:0 a.m.8 views

CVE-2023-1549

The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...

7.2CVSS8.8AI score0.16903EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:17 p.m.10 views

CVE-2022-0901

The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUESTURI before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters...

6.1CVSS6.2AI score0.03541EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:15 p.m.6 views

CVE-2022-0288

The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the htmlelementselection parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.02389EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:58 a.m.10 views

CVE-2015-9497

The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php...

8.8CVSS6.2AI score0.0098EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2025/03/14 10:19 p.m.8 views

WordPress Ad Inserter plugin <= 2.8.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Andres Roldan in WordPress Plugin Ad Inserter versions = 2.8.0...

5.1CVSS7.8AI score0.00389EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/08 6:7 a.m.12 views

CVE-2025-22623

Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php...

5.1CVSS6.8AI score0.00389EPSS
SaveExploits0References4
NVD
NVD
added 2025/03/06 5:15 a.m.15 views

CVE-2025-22623

Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php...

5.1CVSS0.00389EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/06 5:8 a.m.59 views

CVE-2025-22623

CVE-2025-22623 affects the WordPress plugin Ad Inserter – Ad Manager and AdSense Ads (version 2.8.0 and earlier). The vulnerability arises from the web application generating content without validating the origin of untrusted data in myapp/includes/dst/dst.php, enabling a reflected cross-site scr...

5.1CVSS7.1AI score0.00389EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/06 5:8 a.m.38 views

CVE-2025-22623 Ad Inserter - Reflected cross-site scripting (XSS)

Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php...

5.1CVSS0.00389EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/03/06 5:8 a.m.12 views

CVE-2025-22623 Ad Inserter - Reflected cross-site scripting (XSS)

Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php...

5.1CVSS7.1AI score0.00389EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/06 12:0 a.m.24 views

WordPress plugin Ad Inserter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

5.1CVSS8.3AI score0.00389EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/26 3:26 p.m.17 views

CVE-2025-27296

Missing Authorization vulnerability in revenueflex Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue revenueflex-easy-ads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue:...

7.2CVSS7.2AI score0.00493EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/24 3:15 p.m.21 views

CVE-2025-27296

Missing Authorization vulnerability in revenueflex Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue revenueflex-easy-ads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue:...

7.2CVSS0.00493EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/02/24 3:12 p.m.10 views

WordPress Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue Plugin <= 1.5 - Settings Change vulnerability

Settings Change vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue versions = 1.5...

7.2CVSS7AI score0.00493EPSS
SaveExploits0Affected Software1
CVE
CVE
added 2025/02/24 2:48 p.m.74 views

CVE-2025-27296

CVE-2025-27296 is a Missing Authorization vulnerability in revenueflex Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue (WordPress plugin) affecting versions up to 1.5. Connected sources (Patchstack/CVE records) describe an incorrect access control configuration that enables a se...

7.2CVSS7.2AI score0.00493EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/24 12:0 a.m.10 views

WordPress plugin Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... A security vulnerability exists in...

7.2CVSS8.2AI score0.00493EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/18 10:26 p.m.14 views

CVE-2025-22680

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Ad Inserter Pro allows Reflected XSS. This issue affects Ad Inserter Pro: from n/a through 2.7.39...

7.1CVSS8.6AI score0.00239EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/16 11:15 p.m.20 views

CVE-2025-22680

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Ad Inserter Pro allows Reflected XSS. This issue affects Ad Inserter Pro: from n/a through 2.7.39...

7.1CVSS0.00239EPSS
SaveExploits0References1
Rows per page
Query Builder