TI-2025-10850 CVE-2025-11834 · GHSA-r2fc-r96m-36hf
WP AD Gallery <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The WP AD Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'startindex' parameter of the ad-gallery shortcode in all versions up to, and including, 1.3.