CVE Database /
CVE-2025-10487
CVE · High
CVE-2025-10487 — Advanced Ads – Ad Manager & AdSense [advanced-ads] < 2.0.13
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-10487
|
Advanced Ads – Ad Manager & AdSense [advanced-ads] < 2.0.13 |
Improper Control of Generation of Code ('Code Injection') |
High
7.3
|
< 2.0.13
|
2.0.13 |
2025-10-31 |
—
|
CVE-2025-10487
The Advanced Ads – Ad Manager & AdSense plugin for WordPress contains a security flaw in versions up to 2.0.12, allowing unauthorized access to an AJAX endpoint. This vulnerability enables unauthenticated attackers to execute arbitrary functions, such as retrieving excerpts of posts, potentially leading to sensitive information exposure.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings