Read the docs

Broadstreet

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Broadstreet records in CISA KEV

No Broadstreet vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2017-14768 CVE-2017-20289 · GHSA-p32h-85vq-6f9p

Local file inclusion in Broadstreet Ad Widget WordPress plugin

Priority HIGH 69

Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP files by passing unsanitized input to require in…

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00931 Published 2026-10-22 Fixed in 2.12.0 CWE-98
TI-2025-42754 CVE-2025-69311 · GHSA-qp54-rrr2-2cx5

WordPress Broadstreet Ads plugin <= 1.52.1 - Broken Access Control vulnerability

Priority LOW 33

Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through <= 1.52.1.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00268 Published 2026-01-22 No fix listed CWE-862
TI-2025-30483 CVE-2025-48113 · GHSA-rhc7-gggc-mcgq

WordPress Broadstreet plugin <= 1.51.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet Broadstreet Ads broadstreet allows Stored XSS.This issue affects Broadstreet Ads: from n/a through <= 1.51…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00212 Published 2025-05-16 No fix listed CWE-79
TI-2025-23308 CVE-2025-32211 · GHSA-944c-wq2v-7wrg

WordPress Broadstreet plugin <= 1.52.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet Broadstreet Ads broadstreet allows Stored XSS.This issue affects Broadstreet Ads: from n/a through <= 1.52…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00227 Published 2025-04-08 No fix listed CWE-79
TI-2026-33027 CVE-2026-45210 · GHSA-qfh3-p8jm-v9fx

WordPress Broadstreet Ads plugin <= 1.52.2 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through <= 1.52.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0017 Published 2026-05-12 No fix listed CWE-862
Open these records in search →