CVE-2025-11827

The Oboxmedia Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforewidget' and 'afterwidget' parameters of the oboxads-ad-widget shortcode in all versions up to, and including, 1.9.8. This is due to insufficient input sanitization and output escaping. This makes it...

PT-2025-43048

Name of the Vulnerable Software and Affected Versions Oboxmedia Ads plugin for WordPress versions up to and including 1.9.8 Description The Oboxmedia Ads plugin for WordPress is susceptible to Stored Cross-Site Scripting through the before widget and after widget parameters of the oboxads-ad-widg...