Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Ad Inserter Project Component: Ad Inserter Clear all filters
TI-2023-01463 CVE-2023-1549 · GHSA-v9wx-wp77-q49m

Ad Inserter < 2.7.27 - Admin+ PHP Object Injection

Priority HIGH 67

The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.16903 Published 2023-05-15 Fixed in 2.7.27
TI-2022-00805 CVE-2022-0901 · GHSA-hj7f-7vcm-jv3j

Ad Inserter < 2.7.12 - Reflected Cross-Site Scripting

Priority LOW 34

The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUEST_URI before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not enc…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03596 Published 2022-04-04 Fixed in 2.7.12 CWE-79
TI-2022-00220 CVE-2022-0288 · GHSA-f6p6-h7v7-mpgx

Ad Inserter < 2.7.10 - Reflected Cross-Site Scripting

Priority LOW 31

The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the html_element_selection parameter before outputting it back in the page, leading to a Reflected…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02061 Published 2022-02-21 Fixed in 2.7.10 CWE-79