Now officially on WordPress.org

CVE Database / CVE-2025-12884

CVE · Medium

CVE-2025-12884 — Advanced Ads – Ad Manager & AdSense [advanced-ads] < 2.0.15

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-12884 Advanced Ads – Ad Manager & AdSense [advanced-ads] < 2.0.15 Improper Access Control Medium 4.3 < 2.0.15 2.0.15 2026-02-18 —

CVE-2025-12884

The Advanced Ads – Ad Manager & AdSense plugin for WordPress contains a security flaw that allows unauthorized users to manipulate ad placements within the system. Specifically, in versions up to 2.0.14, the plugin fails to adequately validate user permissions when executing certain actions, enabling attackers with subscriber-level access or higher to modify ad assignments. This vulnerability enables such attackers to alter which ads are displayed by a given placement.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings