WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ad-inserter
Published
2026-09-24
Title
Ad Inserter < 2.8.19 - Unauthenticated Stored XSS
Slug
ad-inserter
Published
2026-09-25
Title
Ad Inserter 2.8.12 - 2.8.18 - Subscriber+ RCE / Stored XSS via Global Custom Fields
Slug
ad-inserter
Published
2026-09-30
Title
Ad Inserter < 2.8.19 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header)
Slug
ad-inserter
Published
2026-09-30
Title
Ad Inserter < 2.8.19 - Reflected Cross-Site Scripting via 's' Search Parameter
Slug
ad-inserter
Published
2026-10-12
Title
Ad Inserter – Ad Manager & AdSense Ads < 2.8.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ad-inserter
Published
2026-10-12
Title
Ad Inserter < 2.8.19 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters
Slug
ad-inserter
Published
2026-10-22
Title
Ad Inserter – Ad Manager & AdSense Ads < 2.8.19 - Reflected Cross-Site Scripting
Slug
ad-inserter
Published
2026-10-26
Title
Ad Inserter – Ad Manager & AdSense Ads < 2.8.19 - Reflected Cross-Site Scripting
Slug
ad-inserter
Published
2026-10-29
Title
Ad Inserter – Ad Manager & AdSense Ads < 2.8.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ad-inserter
Published
2026-10-30
Title
Ad Inserter < 2.8.20 - Unauthenticated Stored XSS
Slug
ad-inserter
Published
2026-10-30
Title
Ad Inserter < 2.8.20 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter
Slug
ad-inserter-pro
Published
2022-01-24
Title
Ad Inserter < 2.7.10 - Reflected Cross-Site Scripting
Slug
ad-inserter-pro
Published
2022-03-14
Title
Ad Inserter < 2.7.12 - Reflected Cross-Site Scripting
Slug
ad-inserter-pro
Published
2025-02-03
Title
Ad Inserter Pro < 2.8.0 - Reflected Cross-Site Scripting
Slug
ad-invalid-click-protector
Published
2022-01-14
Title
Ad Invalid Click Protector (AICP) < 1.2.6 - Authenticated SQL Injection
Slug
ad-invalid-click-protector
Published
2022-04-05
Title
Ad Invalid Click Protector (AICP) < 1.2.7 - Reflected Cross-Site Scripting
Slug
ad-invalid-click-protector
Published
2022-04-05
Title
Ad Invalid Click Protector (AICP) < 1.2.7 - Arbitrary Ban Deletion via CSRF
Slug
ad-invalid-click-protector
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
ad-invalid-click-protector
Published
2026-07-27
Title
Ad Invalid Click Protector (AICP) < 1.3.1 - Missing Authorization
Slug
ad-manager-wd
Published
2019-01-25
Title
Download Ad Manager by WD - Arbitrary File Download
Slug
ad-manager-wd
Published
2026-06-05
Title
10WebAdManager <= 1.0.11 - Unauthenticated Arbitrary File Download
Slug
ad-minister
Published
2013-12-05
Title
Ad-minister 0.6 - Authenticated Cross-Site Scripting (XSS)
Slug
ad-short
Published
2026-03-20
Title
Ad Short <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'client' Shortcode Attribute
Slug
ad-sliding-faq
Published
2026-01-06
Title
AD Sliding FAQ < 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
ad-swapper
Published
2021-02-14
Title
Zebra_Form Library <= 2.9.8 - Reflected Cross-Site Scripting (XSS)