Plugin icon

Broadstreet

broadstreet

Vulnerabilities:

10

Last Updated:

May 6, 2026

Active Installs:

700

Published
Title
Fixed in
CVSS
Published
2026-05-20
Title
Broadstreet < 1.53.2 - Authenticated (Subscriber+) Private Post Meta Disclosure via get_sponsored_meta
Fixed in
Fixed in 1.53.2
CVSS
4.3 (medium)
Published
2026-05-12
Title
Broadstreet < 1.53.2 - Authenticated (Subscriber+) Information Disclosure
Fixed in
Fixed in 1.53.2
CVSS
4.3 (medium)
Published
2026-05-12
Title
Broadstreet < 1.53.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.53.2
CVSS
4.4 (medium)
Published
2026-05-12
Title
Broadstreet < 1.53.2 - Subscriber+ Arbitrary Advertiser Creation
Fixed in
Fixed in 1.53.2
CVSS
4.3 (medium)
Published
2026-01-19
Title
Broadstreet Ads < 1.52.2 - Missing Authorization
Fixed in
Fixed in 1.52.2
CVSS
4.3 (medium)
Published
2025-05-19
Title
Broadstreet < 1.51.8 - Reflected XSS
Fixed in
Fixed in 1.51.8
CVSS
7.1 (high)
Published
2025-05-16
Title
Broadstreet < 1.51.3 - Contributor+ Stored XSS
Fixed in
Fixed in 1.51.3
CVSS
5.9 (medium)
Published
2025-04-07
Title
Broadstreet < 1.52.2 - Subscriber+ Stored XSS
Fixed in
Fixed in 1.52.2
CVSS
8.8 (high)
Published
2025-04-04
Title
Broadstreet < 1.52.2 - Cross-Site Request Forgery
Fixed in
Fixed in 1.52.2
CVSS
4.3 (medium)
Published
2025-01-24
Title
Broadstreet < 1.51.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via zone Parameter
Fixed in
Fixed in 1.51.1
CVSS
6.4 (medium)