CVE-2017-20289

Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP files by passing unsanitized input to require in views/modal/index.php. Attackers can supply directory traversal sequences in...

CVE-2017-20289 Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local File Inclusion via step parameter

Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP files by passing unsanitized input to require in views/modal/index.php. Attackers can supply directory traversal sequences in...

EUVD-2017-19026

Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP files by passing unsanitized input to require in views/modal/index.php. Attackers can supply directory traversal sequences in...

CVE-2017-20289

The Broadstreet Ad Widget plugin for WordPress (versions 2.2.0 before 2.12.0 ) contains a local file inclusion vulnerability. The root cause is the passing of unsanitized input to a require statement in views/modal/index.php. Authenticated users can execute attacker-chosen PHP files by supplying ...

VulnCheck KEV: CVE-2017-20289

Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP files by passing unsanitized input to require in views/modal/index.php. Attackers can supply directory traversal sequences in...

WordPress Ad Widget 2.11.0 - Local File Inclusion Detection

WordPress Ad Widget 2.11.0 is vulnerable to local file inclusion. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Ad Widget 2.""" import re from kittysploit import from...

CVE-2025-11827

The Oboxmedia Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforewidget' and 'afterwidget' parameters of the oboxads-ad-widget shortcode in all versions up to, and including, 1.9.8. This is due to insufficient input sanitization and output escaping. This makes it...

PT-2025-43048

Name of the Vulnerable Software and Affected Versions Oboxmedia Ads plugin for WordPress versions up to and including 1.9.8 Description The Oboxmedia Ads plugin for WordPress is susceptible to Stored Cross-Site Scripting through the before widget and after widget parameters of the oboxads-ad-widg...

EUVD-2024-31408

Malicious code in bioql PyPI...

CVE-2024-33696

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Broadstreet XPRESS WordPress Ad Widget allows Stored XSS.This issue affects WordPress Ad Widget: from n/a through 2.20.0...

CVE-2024-3952: Improper Neutralization of Input During Web Page Generation

The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Ad widget in all versions up to, and including, 1.52.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress Advanced Ads plugin <= 1.52.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Ad Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Ad Widget vulnerability discovered by wesley wcraft in WordPress Plugin Advanced Ads versions = 1.52.1...

WordPress Ad Widget <= 2.20.0 - Authenticated (Admin+) Stored Cross-Site Scripting

Description The WordPress Ad Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.20.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-33696

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Broadstreet XPRESS WordPress Ad Widget allows Stored XSS.This issue affects WordPress Ad Widget: from n/a through 2.20.0...

CVE-2024-33696

CVE-2024-33696 describes a stored cross-site scripting vulnerability in the Broadstreet XPRESS WordPress Ad Widget. The Red Hat security entry mirrors this vulnerability, noting the issue as an “Improper Neutralization of Input During Web Page Generation” affecting the WordPress Ad Widget until v...

WordPress WordPress Ad Widget plugin <= 2.20.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin WordPress Ad Widget versions = 2.20.1...

CVE-2024-33696: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Broadstreet XPRESS WordPress Ad Widget allows Stored XSS.This issue affects WordPress Ad Widget: from n/a through 2.20.0...

WordPress plugin Ad Widget cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

PT-2024-25452

Name of the Vulnerable Software and Affected Versions Broadstreet XPRESS WordPress Ad Widget versions through 2.20.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

WordPress WordPress Ad Widget Plugin <= 2.20.0 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Ad Widget Type Plugin Vulnerable versions = 2.20.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33696 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b3b1c1f912e9 Credits Joshua Chan Required privilege...