CVE-2025-22623

The Ad Inserter plugin for WordPress contains a security flaw affecting all versions up to 2.8.0, allowing malicious actors to introduce unauthorized code snippets onto vulnerable sites through manipulated links or other user interactions. This vulnerability stems from inadequate filtering of input data and corresponding output protection mechanisms. As a result, attackers can potentially execute arbitrary scripts on affected websites without needing prior authorization.

Based on public CVE data (MITRE/NVD).