CVE · High
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-13592 | Advanced Ads – Ad Manager & AdSense [advanced-ads] < 2.0.15 | Improper Control of Generation of Code ('Code Injection') | High 7.2 | < 2.0.15 | 2.0.15 | 2025-12-29 | — |
The Advanced Ads plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.0.14 via the 'change-ad__content' shortcode parameter. This allows authenticated attackers with editor-level permissions or above, to execute code on the server.
Source: CVE.org
No signup, no credit card — enter your URL and get a security report in seconds.