Scripteo

Ads Pro

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2026-25388

  • EPSS 0.04%
  • Veröffentlicht 19.02.2026 08:27:02
  • Zuletzt bearbeitet 20.02.2026 16:22:40

Missing Authorization vulnerability in scripteo Ads Pro ap-plugin-scripteo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ads Pro: from n/a through <= 5.0.

7.5

CVE-2025-5339

  • EPSS 0.07%
  • Veröffentlicht 02.07.2025 03:47:26
  • Zuletzt bearbeitet 08.07.2025 14:18:57

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘bsa_pro_id’ parameter in all versions up to, and including, 4.89 due to insufficient escaping on the user supplie...

7.5

CVE-2025-6437

  • EPSS 0.07%
  • Veröffentlicht 02.07.2025 03:47:25
  • Zuletzt bearbeitet 08.07.2025 14:10:13

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the ‘oid’ parameter in all versions up to, and including, 4.89 due to insufficient escaping on the user supplied parameter and la...

9.8

CVE-2025-4380

  • EPSS 16.51%
  • Veröffentlicht 02.07.2025 03:47:23
  • Zuletzt bearbeitet 08.07.2025 14:34:59

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsa_template' parameter of the `bsa_preview_callback` function. This makes...

8.8

CVE-2025-6459

  • EPSS 0.02%
  • Veröffentlicht 02.07.2025 03:47:22
  • Zuletzt bearbeitet 08.07.2025 13:55:50

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.89. This is due to missing or incorrect nonce validation on the bsaCreateAdTempl...

7.5

CVE-2025-4381

  • EPSS 0.07%
  • Veröffentlicht 02.07.2025 03:47:21
  • Zuletzt bearbeitet 08.07.2025 14:33:19

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the ‘$id’ variable of the getSpace() function in all versions up to, and including, 4.89 due to insufficient escaping on the user...

9.8

CVE-2025-4689

  • EPSS 0.45%
  • Veröffentlicht 02.07.2025 03:47:21
  • Zuletzt bearbeitet 08.07.2025 14:26:15

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion which leads to Remote Code Execution in all versions up to, and including, 4.89. This is due to the presence of a SQL Injectio...

7.5

CVE-2024-13322

  • EPSS 21.44%
  • Veröffentlicht 02.05.2025 03:21:19
  • Zuletzt bearbeitet 06.05.2025 15:49:41

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the 'a_id' parameter in all versions up to, and including, 4.88 due to insufficient escaping on the user supplied parameter and l...