Read the docs

Ad Inserter Project

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Ad Inserter Project records in CISA KEV

No Ad Inserter Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ad Inserter 7 records HIGH

Records

7 records

TI-2023-01463 CVE-2023-1549 · GHSA-v9wx-wp77-q49m

Ad Inserter < 2.7.27 - Admin+ PHP Object Injection

Priority HIGH 67

The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.16903 Published 2023-05-15 Fixed in 2.7.27
TI-2022-00805 CVE-2022-0901 · GHSA-hj7f-7vcm-jv3j

Ad Inserter < 2.7.12 - Reflected Cross-Site Scripting

Priority LOW 34

The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUEST_URI before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not enc…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03596 Published 2022-04-04 Fixed in 2.7.12 CWE-79
TI-2022-00220 CVE-2022-0288 · GHSA-f6p6-h7v7-mpgx

Ad Inserter < 2.7.10 - Reflected Cross-Site Scripting

Priority LOW 31

The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the html_element_selection parameter before outputting it back in the page, leading to a Reflected…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02061 Published 2022-02-21 Fixed in 2.7.10 CWE-79
Open these records in search →