VendorsAd Inserter Projectad_inserterall versions
Vulnerabilities

Ad Inserter Project Ad Inserter

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2019-15324
The ad-inserter plugin before 2.4.22 for WordPress has remote code execution.
Published 2019-08-22 · Modified
8.8EPSS 0.036
CVE-2015-9497
The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php.
Published 2019-10-22 · Modified
8.8EPSS 0.010
CVE-2019-15323
The ad-inserter plugin before 2.4.20 for WordPress has path traversal.
Published 2019-08-22 · Modified
7.5EPSS 0.020
CVE-2023-4668
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe
Published 2023-10-20 · Modified
7.5EPSS 0.006
CVE-2023-1549
Ad Inserter < 2.7.27 - Admin+ PHP Object Injection
Published 2023-05-15 · Modified
7.2EPSS 0.169
CVE-2022-0901
Ad Inserter < 2.7.12 - Reflected Cross-Site Scripting
Published 2022-04-04 · Modified
6.1EPSS 0.036
CVE-2022-0288
Ad Inserter < 2.7.10 - Reflected Cross-Site Scripting
Published 2022-02-21 · Modified
6.1EPSS 0.021