PT-2026-98308

Alright, so I saw this Wordfence report from last week and honestly my jaw dropped. Nearly 50 plugins and themes dropped with active, unpatched vulnerabilities in a single week. That's not a normal week. That's a red flag waving right in our faces. And look, I get it. We all know the WordPress...

WordPress DS Ad Rotator plugin <= 0.8 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Huynh Kien Minh in WordPress Plugin DS Ad Rotator versions = 0.8...

CVE-2026-81402

The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code...

CVE-2026-81402 DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload

The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code...

CVE-2026-81402 DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload

The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code...

EUVD-2026-76784

The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code...

CVE-2026-81402

The DS Ad Rotator WordPress plugin (versions through 0.8 ) is vulnerable to an unauthenticated arbitrary file upload vulnerability. The issue stems from a lack of capability checks, nonce verification, and file-type validation within the plugin's image upload handler . This allows unauthenticated...

CVE-2026-81402: Unrestricted Upload of File with Dangerous Type

The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code...

PT-2026-90567

Name of the Vulnerable Software and Affected Versions DS Ad Rotator WordPress plugin versions prior to 0.9 Description The image upload handler fails to perform capability checks, nonce verification, and file-type validation. This allows unauthenticated attackers to upload arbitrary files, such a...

Crack hunting: not all it’s cracked up to be

People sometimes ask us in the forums if a keygen or software crack is safe to use. Sometimes, these programs do what they say on the tin. Other times, they’re not what they say they are. In this post, I’ll describe what happened when I went crack hunting, and why it is often unsafe to carry out...

Ad Rotator AdPeeps 8.6.9 Persistent XSS Vulnerability

Exploit for php platform in category web applications Advisory: Ad Rotator AdPeeps 8.6.9 Persistent XSS Vulnerability Version:8.6.9 Vendor URL: http://adpeeps.com/ Demo Link:http://demo.adpeeps.com/ Author: Viknesvaran Sittaramane Category: Webapp Twiiter: https://twitter.com/csvsn...

AdPeeps 8.5d1 XSS and HTML Injection Vulnerabilities

No description provided by source. AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected: 8.5d1 3-18-09 newest Info: Ad Peeps is a banner rotator and text ad rotator - all in one that allows you to track, sell and manage banner ads, rich-media/flash ads and text ads on your...

Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection

Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected: 8.5d1 3-18-09 newest Info: Ad Peeps is a banner rotator and text ad rotator - all in one that allows you to track, sell and manage banner ads,...

AdPeeps 8.5d1 Cross Site Scripting

AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected: 8.5d1 3-18-09 newest Info: Ad Peeps is a banner rotator and text ad rotator - all in one that allows you to track, sell and manage banner ads, rich-media/flash ads and text ads on your website. Built using PHP/MYSQL, Ad...

Digi-news and Digi-ads version 1.1 admin access without password

Digi-news and Digi-ads version 1.1 admin access without password .oO Overview Oo. Digi-news and Digi-ads version 1.1 admin access without password Discovered on 2003, March, 30th Vendor: Digi-FX Digi-news 1.1 is a PHP news editor. It allows you to easily add, edit, and delete news. Digi-ad 1.1 is...