CVE-2025-10487

The CVE-2025-10487 vulnerability affects the WordPress plugin Advanced Ads – Ad Manager & AdSense. Public details confirm an unauthenticated remote code execution flaw in versions up to 2.0.12 via the select_one() AJAX endpoint, caused by insufficient access restrictions and allowing function cal...

CVE-2025-10487 Advanced Ads <= 2.0.12 - Unauthenticated Limited Code Execution

The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.12 via the selectone function. This is due to the endpoint not properly restricting access to the AJAX endpoint or limiting the functions that can be calle...