Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Broadstreet Clear all filters
TI-2017-14768 CVE-2017-20289 · GHSA-p32h-85vq-6f9p

Local file inclusion in Broadstreet Ad Widget WordPress plugin

Priority HIGH 69

Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP files by passing unsanitized input to require in…

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00931 Published 2026-10-22 Fixed in 2.12.0 CWE-98
TI-2026-33027 CVE-2026-45210 · GHSA-qfh3-p8jm-v9fx

WordPress Broadstreet Ads plugin <= 1.52.2 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through <= 1.52.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0017 Published 2026-05-12 No fix listed CWE-862
TI-2025-42754 CVE-2025-69311 · GHSA-qp54-rrr2-2cx5

WordPress Broadstreet Ads plugin <= 1.52.1 - Broken Access Control vulnerability

Priority LOW 33

Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through <= 1.52.1.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00268 Published 2026-01-22 No fix listed CWE-862
TI-2025-30483 CVE-2025-48113 · GHSA-rhc7-gggc-mcgq

WordPress Broadstreet plugin <= 1.51.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet Broadstreet Ads broadstreet allows Stored XSS.This issue affects Broadstreet Ads: from n/a through <= 1.51…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00212 Published 2025-05-16 No fix listed CWE-79
TI-2025-23308 CVE-2025-32211 · GHSA-944c-wq2v-7wrg

WordPress Broadstreet plugin <= 1.52.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet Broadstreet Ads broadstreet allows Stored XSS.This issue affects Broadstreet Ads: from n/a through <= 1.52…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00227 Published 2025-04-08 No fix listed CWE-79