CVE-2026-57693

The Ad Inserter plugin for WordPress contains a security flaw in versions 2.8.11 and earlier, which allows malicious users with subscriber privileges or higher to insert malicious code into website content. This vulnerability arises from inadequate filtering of input data and insufficient protection against script injection. As a result, when an affected page is loaded, the injected code will be executed by the user's browser.

Based on public CVE data (MITRE/NVD).