WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ad-injection
Published
2022-03-22
Title
Ad Injection <= 1.2.0.19 - Admin+ Stored Cross-Site Scripting & RCE
Slug
ad-inserter
Published
2015-05-02
Title
Ad Inserter 1.5.2 - CSRF & XSS
Slug
ad-inserter
Published
2015-08-13
Title
Ad Inserter <= 1.5.5 - Authenticated Cross-Site Scripting (XSS)
Slug
ad-inserter
Published
2019-07-12
Title
Ad Inserter <= 2.4.19 - Authenticated Path Traversal
Slug
ad-inserter
Published
2019-07-15
Title
Ad Inserter <= 2.4.21 - Authenticated Remote Code Execution
Slug
ad-inserter
Published
2022-01-24
Title
Ad Inserter < 2.7.10 - Reflected Cross-Site Scripting
Slug
ad-inserter
Published
2022-02-03
Title
Ad Inserter < 2.7.11 - Admin+ RCE / Stored XSS
Slug
ad-inserter
Published
2022-03-14
Title
Ad Inserter < 2.7.12 - Reflected Cross-Site Scripting
Slug
ad-inserter
Published
2023-04-19
Title
Ad Inserter < 2.7.27 - Admin+ PHP Object Injection
Slug
ad-inserter
Published
2023-09-22
Title
Ad Inserter – Ad Manager & AdSense Ads < 2.7.31 - Unauthenticated Sensitive Information Exposure
Slug
ad-inserter
Published
2023-09-22
Title
Ad Inserter – Ad Manager & AdSense Ads < 2.7.31 - Unauthenticated Sensitive Information Exposure
Slug
ad-inserter
Published
2024-10-14
Title
Ad Inserter < 2.7.38 - Reflected Cross-Site Scripting
Slug
ad-inserter
Published
2025-03-05
Title
Ad Inserter - Ad Manager and AdSense Ads < 2.8.1 - Reflected Cross-Site Scripting
Slug
ad-inserter
Published
2025-11-04
Title
Ad Inserter < 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
Slug
ad-inserter-pro
Published
2022-01-24
Title
Ad Inserter < 2.7.10 - Reflected Cross-Site Scripting
Slug
ad-inserter-pro
Published
2022-03-14
Title
Ad Inserter < 2.7.12 - Reflected Cross-Site Scripting
Slug
ad-inserter-pro
Published
2025-02-03
Title
Ad Inserter Pro < 2.8.0 - Reflected Cross-Site Scripting
Slug
ad-invalid-click-protector
Published
2022-01-14
Title
Ad Invalid Click Protector (AICP) < 1.2.6 - Authenticated SQL Injection
Slug
ad-invalid-click-protector
Published
2022-04-05
Title
Ad Invalid Click Protector (AICP) < 1.2.7 - Reflected Cross-Site Scripting
Slug
ad-invalid-click-protector
Published
2022-04-05
Title
Ad Invalid Click Protector (AICP) < 1.2.7 - Arbitrary Ban Deletion via CSRF
Slug
ad-invalid-click-protector
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
ad-manager-wd
Published
2019-01-25
Title
Download Ad Manager by WD - Arbitrary File Download
Slug
ad-minister
Published
2013-12-05
Title
Ad-minister 0.6 - Authenticated Cross-Site Scripting (XSS)
Slug
ad-sliding-faq
Published
2026-01-06
Title
AD Sliding FAQ <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
ad-swapper
Published
2021-02-14
Title
Zebra_Form Library <= 2.9.8 - Reflected Cross-Site Scripting (XSS)