Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Vendor: spacetime Clear all filters
TI-2026-83232 CVE-2026-102905 · GHSA-76hf-r86r-7ch3

Unauthenticated shortcode execution in Ad Inserter WordPress plugin

Priority LOW 35

The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.8.19 This is due to the software allowing users to execute an act…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00422 Published 2026-10-30 No fix listed CWE-94
TI-2026-71556 CVE-2026-89097 · GHSA-r84v-5jjr-cxrx

Sensitive information exposure in Ad Inserter WordPress plugin

Priority LOW 20

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the ai_wp_footer_hook.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00237 Published 2026-10-13 No fix listed CWE-200
TI-2026-60478 CVE-2026-89427 · GHSA-cjx2-r3r5-6cq4

Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter

Priority LOW 27

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 's' Search Parameter in all versions up to, and including, 2.8.18 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00253 Published 2026-10-01 No fix listed CWE-79
TI-2026-16135 CVE-2026-19902 · GHSA-298r-885r-pj27

Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header)

Priority LOW 27

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the Referer header in all versions up to, and including, 2.8.18 due to insufficient input sanitization a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00259 Published 2026-10-01 No fix listed CWE-79
TI-2026-10327 CVE-2026-11984 · GHSA-xfh3-8f49-737f

Missing authorization in spacetime Ad Inserter – Ad Manager & AdSense Ads

Priority LOW 30

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.16 due to a missing capability check on the `ai-debug-code` URL-parameter.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00364 Published 2026-09-16 No fix listed CWE-862
TI-2026-41517 CVE-2026-57693 · GHSA-4m45-rw7q-jxxf

WordPress Ad Inserter plugin <= 2.8.11 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spacetime Ad Inserter ad-inserter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-07-13 No fix listed CWE-79
TI-2026-10268 CVE-2026-11900 · GHSA-ppgc-36hr-q23g

Authorization bypass in spacetime Ad Inserter – Ad Manager & AdSense Ads

Priority LOW 20

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 2.8.16 via the 'data' attribute of the [adinserter] shortcode.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00454 Published 2026-07-03 No fix listed CWE-639
TI-2025-10768 CVE-2025-11745 · GHSA-f5fh-r4mj-fqj8

Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field

Priority LOW 28

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field through the plugin's 'adinserter' shortcode in all versions up to, and including, 2.8.7 due to…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00231 Published 2025-11-05 No fix listed CWE-80