CVE-2026-11900

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 2.8.16 via the 'data' attribute of the adinserter shortcode. This is due to the replaceaitags function processing a reusable-block-N tag pattern that...

CVE-2026-11900 Ad Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode Attribute

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 2.8.16 via the 'data' attribute of the adinserter shortcode. This is due to the replaceaitags function processing a reusable-block-N tag pattern that...

CVE-2026-12729

creationtimestamp| type| source ---|---|--- 2026-07-03 06:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mppvi4utaj27 2026-07-03 06:22:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppvtqe2el2h 2026-07-03 19:25:00+00:00| seen|...

CVE-2026-9725

creationtimestamp| type| source ---|---|--- 2026-07-03 05:58:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppuinqzrc24 2026-07-03 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116854516946886983 2026-07-03 06:00:27+00:00| seen|...

CVE-2026-12731

creationtimestamp| type| source ---|---|--- 2026-07-03 05:16:14+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpps4zned62x 2026-07-03 06:47:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppxaip7s42t 2026-07-03 19:25:24+00:00| seen|...

CVE-2026-57675

creationtimestamp| type| source ---|---|--- 2026-07-03 00:18:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppbht4nyf2c 2026-07-03 00:18:03+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mppbhtr7x722 2026-07-31 06:44:07+00:00| seen|...

PT-2026-55514

Name of the Vulnerable Software and Affected Versions Ad Inserter – Ad Manager & AdSense Ads versions prior to 2.8.17 Description An Insecure Direct Object Reference exists via the data attribute of the adinserter shortcode. The replace ai tags function processes a reusable-block-N tag pattern th...

CVE-2026-8441

creationtimestamp| type| source ---|---|--- 2026-07-02 22:23:03+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpp327ptzn2o 2026-07-02 22:23:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp32aiaer2u 2026-07-03 03:35:32+00:00| seen|...

CVE-2024-58352

creationtimestamp| type| source ---|---|--- 2026-07-02 19:18:35+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpoqqdpjdh2i 2026-07-02 19:35:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mporpg2ujb2w 2026-07-03 08:23:10+00:00| seen|...

CVE-2026-44935

creationtimestamp| type| source ---|---|--- 2026-07-02 18:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpomehucbl2t 2026-07-02 19:40:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mporyehyhq2b 2026-07-03 08:42:38+00:00| seen|...

CVE-2026-56841

creationtimestamp| type| source ---|---|--- 2026-07-02 17:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpoj3e3m3z26 2026-07-02 18:36:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoofozn5v27 2026-07-03 07:24:14+00:00| seen|...

CVE-2026-14355

creationtimestamp| type| source ---|---|--- 2026-07-02 14:39:44+00:00| seen| https://bsky.app/profile/remi.famillecollet.com/post/3mpob5prgns2v 2026-07-02 14:41:26+00:00| seen| https://bsky.app/profile/remi.famillecollet.com/post/3mpobaraj7c2v 2026-07-02 14:43:07+00:00| seen|...

CVE-2026-54261

creationtimestamp| type| source ---|---|--- 2026-07-02 14:27:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoai3ophu2n 2026-07-02 14:27:40+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpoai5gvar2f 2026-07-03 13:30:06+00:00| seen|...

CVE-2026-20216

creationtimestamp| type| source ---|---|--- 2026-07-02 13:50:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6fqhjmd2f 2026-07-02 13:55:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6nxwhpz2q 2026-08-01 01:14:40+00:00| seen|...

CVE-2026-20215

creationtimestamp| type| source ---|---|--- 2026-07-02 13:50:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6fqhjmd2f 2026-07-02 13:55:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6nxwhpz2q 2026-08-01 01:14:40+00:00| seen|...

CVE-2026-51946

creationtimestamp| type| source ---|---|--- 2026-07-02 07:17:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnih6gcem2k 2026-07-02 07:24:19+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpnit5xhki22 2026-07-03 12:06:17+00:00| seen|...

CVE-2026-14017

creationtimestamp| type| source ---|---|--- 2026-07-02 06:22:11+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpnfe2bdbd2i 2026-07-02 06:22:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnfe2jtr527 2026-07-02 07:49:29+00:00| seen|...

CVE-2026-11781

The CVE-2026-11781 entry affects the Adminify WordPress plugin prior to version 4.2.10. The vulnerability arises because the plugin does not perform per-user read-capability checks on results returned by an administration search feature. As a result, users with a low-privilege role (Contributor) ...

CVE-2026-13987

creationtimestamp| type| source ---|---|--- 2026-07-02 04:20:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6la3e4l2b 2026-07-02 04:20:59+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpn6ld3aon2g 2026-07-02 07:48:23+00:00| seen|...

CVE-2026-14059

creationtimestamp| type| source ---|---|--- 2026-07-02 03:41:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn4fl5blx2o 2026-07-02 03:42:01+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpn4fmq5in2i 2026-07-02 07:50:58+00:00| seen|...