PLUGIN SECURITY
Is Advanced Ads safe?
The only complete toolkit for all ad types. Grow your revenue with AdSense, Amazon—or any affiliate network. Get pinpoint targeting and best support!
What this plugin does
- Slug:
advanced-ads - Author: monetizemore
- 100000+ active installs
- 98/100 rating (1461 reviews on wordpress.org)
- 11544041 all-time downloads
- On WordPress.org since 2014-06-23
ad manageradsadsenseaffiliateamazon
Maintenance status
- Latest known version: 2.0.26
- Last updated: 2026-08-03 3:48pm GMT
- Tested up to WordPress: 7.0.4
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
9 known CVEs on file for Advanced Ads.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-54816 | Advanced Ads – Ad Manager & AdSense [advanced-ads] < 2.0.22 | Improper Control of Generation of Code ('Code Injection') | High 7.5 | < 2.0.22 | 2.0.22 | 2026-06-17 | ✓ fixed in latest |
| CVE-2025-12884 | Advanced Ads – Ad Manager & AdSense [advanced-ads] < 2.0.15 | Improper Access Control | Medium 4.3 | < 2.0.15 | 2.0.15 | 2026-02-18 | ✓ fixed in latest |
| CVE-2025-12984 | Advanced Ads – Ad Manager & AdSense [advanced-ads] < 2.0.16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | Medium 4.9 | < 2.0.16 | 2.0.16 | 2026-01-16 | ✓ fixed in latest |
| CVE-2025-13592 | Advanced Ads – Ad Manager & AdSense [advanced-ads] < 2.0.15 | Improper Control of Generation of Code ('Code Injection') | High 7.2 | < 2.0.15 | 2.0.15 | 2025-12-29 | ✓ fixed in latest |
| CVE-2025-10487 | Advanced Ads – Ad Manager & AdSense [advanced-ads] < 2.0.13 | Improper Control of Generation of Code ('Code Injection') | High 7.3 | < 2.0.13 | 2.0.13 | 2025-10-31 | ✓ fixed in latest |
| CVE-2024-2290 | Advanced Ads – Ad Manager & AdSense [advanced-ads] < 1.52.2 | Deserialization of Untrusted Data | High 7.2 | < 1.52.2 | 1.52.2 | 2024-05-07 | ✓ fixed in latest |
| CVE-2024-3952 | Advanced Ads – Ad Manager & AdSense [advanced-ads] < 1.52.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 1.52.2 | 1.52.2 | 2024-05-07 | ✓ fixed in latest |
| CVE-2022-32776 | Advanced Ads – Ad Manager & AdSense [advanced-ads] < 1.32.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 1.32.0 | 1.32.0 | 2022-09-28 | ✓ fixed in latest |
+ 6 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| — | Advanced Ads – Ad Manager & AdSense [advanced-ads] < 1.17.4 | — | Unknown | < 1.17.4 | 1.17.4 | 2020-03-18 | ✓ fixed in latest |
| — | Advanced Ads – Ad Manager & AdSense [advanced-ads] < 1.17.4 | — | Unknown | < 1.17.4 | 1.17.4 | 2020-03-17 | ✓ fixed in latest |
| — | Advanced Ads – Ad Manager & AdSense [advanced-ads] < 2.0.23 | — | Unknown | < 2.0.23 | 2.0.23 | 0000-00-00 | ✓ fixed in latest |
| — | Advanced Ads – Ad Manager & AdSense [advanced-ads] < 1.17.4 | — | Unknown | < 1.17.4 | 1.17.4 | — | ✓ fixed in latest |
| — | Advanced Ads < 1.17.4 - Reflected XSS via Admin Dashboard | — | Unknown | < 1.17.4 | 1.17.4 | — | ✓ fixed in latest |
| CVE-2026-10082 | Advanced Ads – Ad Manager & AdSense < 2.0.23 - Contributor+ Stored XSS via the_ad Shortcode 'ad_args' Parameter | — | Unknown | < 2.0.23 | 2.0.23 | — | ✓ fixed in latest |
How to fix it
Keep Advanced Ads updated — 2.0.26 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Google for WooCommerce — 800000+ active installs — 54/100 (266)
- Ad Inserter – Ad Manager & AdSense Ads — 300000+ active installs — 98/100 (2428) — max PHP 8.4
- Head, Footer and Post Injections — 200000+ active installs — 98/100 (735) — max PHP 8.4
- Ads.txt Manager — 100000+ active installs — 94/100 (15) — max PHP 8.4
- Reddit for WooCommerce — 80000+ active installs — 100/100 (1)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.