Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: scripteo Component: Ads Pro Clear all filters
TI-2025-04794 CVE-2025-5339 · GHSA-55p8-rqg6-jp5x

SQL injection in scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager

Priority LOW 39

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘bsa_pro_id’ parameter in all versions up to, and including, 4.89 due to insufficien…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00373 Published 2025-07-02 No fix listed CWE-89
TI-2025-05838 CVE-2025-6437 · GHSA-m63c-qqfc-74vv

Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oid

Priority LOW 39

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the ‘oid’ parameter in all versions up to, and including, 4.89 due to insufficient escaping on the…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00373 Published 2025-07-02 No fix listed CWE-89
TI-2025-03908 CVE-2025-4380 · GHSA-635h-h9cr-wcq9

Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion

Priority HIGH 71

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsa_template' parameter of the `bsa_preview_…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.42517 Published 2025-07-02 No fix listed CWE-98
TI-2025-03909 CVE-2025-4381 · GHSA-7wrw-f8qc-4m7w

Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection

Priority LOW 39

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the ‘$id’ variable of the getSpace() function in all versions up to, and including, 4.89 due to ins…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00373 Published 2025-07-02 No fix listed CWE-89
TI-2024-12366 CVE-2024-13322 · GHSA-hj83-q96v-4633

Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injection

Priority MEDIUM 42

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the 'a_id' parameter in all versions up to, and including, 4.88 due to insufficient escaping on the…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01784 Published 2025-05-02 No fix listed CWE-89