Broadstreetads

Broadstreet

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2026-1881

  • EPSS 0.22%
  • Veröffentlicht 21.05.2026 01:26:15
  • Zuletzt bearbeitet 21.05.2026 15:19:30

The Broadstreet plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.52.2 via the get_sponsored_meta AJAX action due to missing validation on a user controlled key. This makes it possible for ...

4.4

CVE-2025-9989

  • EPSS 0.19%
  • Veröffentlicht 13.05.2026 04:26:41
  • Zuletzt bearbeitet 13.05.2026 14:43:46

The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.53.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated att...

5.3

CVE-2025-9987

  • EPSS 0.27%
  • Veröffentlicht 13.05.2026 04:26:40
  • Zuletzt bearbeitet 13.05.2026 14:43:46

The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the get_sponsored_meta() AJAX action. This makes it possible for authenticated attackers, with subscriber-level acce...

4.3

CVE-2025-9988

  • EPSS 0.16%
  • Veröffentlicht 13.05.2026 04:26:38
  • Zuletzt bearbeitet 13.05.2026 14:43:46

The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the create_advertiser AJAX action in all versions up to, and including, 1.53.1. This makes it possible for authenticated attackers, with Su...

6.1

CVE-2025-4652

Exploit
  • EPSS 0.47%
  • Veröffentlicht 09.06.2025 06:00:14
  • Zuletzt bearbeitet 12.06.2025 16:15:48

The Broadstreet WordPress plugin before 1.51.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

6.4

CVE-2024-11825

  • EPSS 0.31%
  • Veröffentlicht 25.01.2025 08:15:07
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘zone’ parameter in all versions up to, and including, 1.51.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...