CVE-2025-4380

CVE-2025-4380 - Ads Pro Plugin

CVE-2025-6437

CVE-2025-6437 affects the WordPress plugin "Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager". Vulnerable in all versions up to 4.89 due to insufficient escaping of the user-supplied parameter and inadequate SQL query preparation for the oid input, allowing unauthenticated attackers t...

CVE-2025-5339

The CVE-2025-5339 entry covers a time-based SQL Injection in the WordPress Ads Pro Plugin (Multi-Purpose Advertising Manager) for versions up to and including 4.89. The root cause is insufficient escaping of the user-supplied bsa_pro_id parameter and inadequate preparation of the existing SQL que...

CVE-2025-6459

The CVE-2025-6459 entry maps to WordPress Ads Pro Plugin (Multi-Purpose WordPress Advertising Manager) with a Cross-Site Request Forgery flaw in the bsaCreateAdTemplate function across all versions up to 4.89. The root cause is missing or incorrect nonce validation, enabling unauthenticated attac...

CVE-2025-4689

The CVE-2025-4689 entry concerns Ads Pro Plugin for WordPress (Advertising Manager). The connected sources confirm a vulnerability chain: an unauthenticated Local File Inclusion (LFI) that can lead to Remote Code Execution (RCE), triggered by a prior SQL Injection, within all versions up to 4.89....

CVE-2025-4381

The Ads Pro Plugin (WordPress Ads Pro)