monetizemore

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

monetizemore records in CISA KEV

No monetizemore vulnerabilities are listed in CISA KEV.

Records

8 records

TI-2025-09614 CVE-2025-10487 · GHSA-fj2x-6xr5-v7vj

Advanced Ads <= 2.0.12 - Unauthenticated Limited Code Execution

LOW 38

The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.12 via the select_one() function.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0047 Published 2025-11-01 No fix listed CWE-94

TI-2026-39619 CVE-2026-54816 · GHSA-pj74-w95m-x6rj

WordPress Advanced Ads plugin <= 2.0.21 - Remote Code Execution (RCE) vulnerability

LOW 35

Improper Control of Generation of Code ('Code Injection') vulnerability in Monetizemore Advanced Ads allows Remote Code Inclusion.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00327 Published 2026-06-17 No fix listed CWE-94

TI-2025-12421 CVE-2025-13592 · GHSA-r2fc-j4gv-f88r

Advanced Ads <= 2.0.14 - Authenticated (Editor+) Remote Code Execution via Shortcode

LOW 35

The Advanced Ads plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.0.14 via the 'change-ad__content' shortcode parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00861 Published 2025-12-29 No fix listed CWE-94

TI-2024-02127 CVE-2024-2290 · GHSA-xww2-fjcq-4hhv

Advanced Ads – Ad Manager & AdSense <= 1.52.1 - Authenticated (Admin+) PHP Object Injection

LOW 35

The Advanced Ads plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.52.1 via deserialization of untrusted input in the 'placement_slug' parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0094 Published 2024-05-09 No fix listed CWE-502

TI-2024-03688 CVE-2024-3952 · GHSA-xf7f-8qhq-f75q

Advanced Ads – Ad Manager & AdSense <= 1.52.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Ad Widget

LOW 29

The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Ad widget in all versions up to, and including, 1.52.1 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00436 Published 2024-05-09 No fix listed CWE-79

TI-2025-11893 CVE-2025-12984 · GHSA-gp72-rgfw-gwgp

Advanced Ads – Ad Manager & AdSense <= 2.0.15 - Authenticated (Admin+) SQL Injection

LOW 23

The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and including, 2.0.15 due to insufficient escaping on the user supplied paramet…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00378 Published 2026-01-17 No fix listed CWE-89

TI-2025-11803 CVE-2025-12884 · GHSA-7pmr-78vh-45xj

Improper access control in monetizemore Advanced Ads – Ad Manager & AdSense

LOW 20

The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 2.0.14.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0033 Published 2026-02-19 No fix listed CWE-284

TI-2026-65932 CVE-2026-94180 · GHSA-j899-v3p9-97f4

WordPress Advanced Ads plugin <= 2.0.26 - Sensitive Data Exposure vulnerability

LOW 19

Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00176 Published 2026-10-02 No fix listed CWE-639

Open these records in search →

Critical	0
High	4
Medium	4
Low	0
No CVSS	0