Read the docs

scripteo

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

scripteo records in CISA KEV

No scripteo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ads Pro 7 records HIGH Ads Booster By Ads Pro 1 record MEDIUM

Records

7 records in Ads Pro · all components

TI-2025-03908 CVE-2025-4380 · GHSA-635h-h9cr-wcq9

Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion

Priority HIGH 71

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsa_template' parameter of the `bsa_preview_…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.42517 Published 2025-07-02 No fix listed CWE-98
TI-2024-12366 CVE-2024-13322 · GHSA-hj83-q96v-4633

Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injection

Priority MEDIUM 42

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the 'a_id' parameter in all versions up to, and including, 4.88 due to insufficient escaping on the…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01784 Published 2025-05-02 No fix listed CWE-89
TI-2025-05838 CVE-2025-6437 · GHSA-m63c-qqfc-74vv

Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oid

Priority LOW 39

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the ‘oid’ parameter in all versions up to, and including, 4.89 due to insufficient escaping on the…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00373 Published 2025-07-02 No fix listed CWE-89
TI-2025-04794 CVE-2025-5339 · GHSA-55p8-rqg6-jp5x

SQL injection in scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager

Priority LOW 39

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘bsa_pro_id’ parameter in all versions up to, and including, 4.89 due to insufficien…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00373 Published 2025-07-02 No fix listed CWE-89
TI-2025-03909 CVE-2025-4381 · GHSA-7wrw-f8qc-4m7w

Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection

Priority LOW 39

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the ‘$id’ variable of the getSpace() function in all versions up to, and including, 4.89 due to ins…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00373 Published 2025-07-02 No fix listed CWE-89
Open these records in search →