CVE Database /
CVE-2025-11745
CVE · Medium
CVE-2025-11745 — Ad Inserter – Ad Manager & AdSense Ads [ad-inserter] < 2.8.8
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-11745
|
Ad Inserter – Ad Manager & AdSense Ads [ad-inserter] < 2.8.8 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) |
Medium
6.4
|
< 2.8.8
|
2.8.8 |
2025-11-04 |
—
|
CVE-2025-11745
The Ad Inserter plugin for WordPress contains a security flaw that allows malicious code injection via custom fields within the 'adinserter' shortcode. This vulnerability affects all versions up to 2.8.7 and can be exploited by authenticated users with contributor-level access or higher, enabling them to embed arbitrary scripts on target pages.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings