3 matches found
CVE-2015-9497
The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php.
CVE-2019-15323
The ad-inserter plugin before 2.4.20 for WordPress has path traversal.
CVE-2019-15324
The ad-inserter plugin before 2.4.22 for WordPress has remote code execution.