Vulnerabilities

TI-2024-20477 CVE-2024-31088 · GHSA-r93p-73f2-rj5x

WordPress AdsPlace'r – Ad Manager, Inserter, AdSense Ads plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPShop.Ru AdsPlace'r – Ad Manager, Inserter, AdSense Ads allows DOM-Based XSS.This issue affects AdsPlace'r – A…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00222 Published 2026-01-06 No fix listed CWE-79

TI-2025-21825 CVE-2025-30550 · GHSA-cw9m-3974-64p8

WordPress CallPhone'r plugin <= 1.1.1 - CSRF to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in WPShop.ru CallPhone'r callphoner allows Stored XSS.This issue affects CallPhone'r: from n/a through <= 1.1.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00193 Published 2025-03-24 No fix listed CWE-352

Vulnerabilities

Filters

WordPress AdsPlace'r – Ad Manager, Inserter, AdSense Ads plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability

WordPress CallPhone'r plugin <= 1.1.1 - CSRF to Stored XSS vulnerability