Unknown Ad Inserter vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Ad Inserter, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2026-81655unknownad inserter+1
EPSS score
0.23%
The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its settings pages, making it reachable by every logged in user under a configuration its own settings allow, and does not filter the content saved there, allowing users with a role as low as subscriber to store code which is then executed as PHP or served unescaped to site visitors.7.2CVE-2023-1549ad_inserter_projectad_inserter+2
EPSS score
16.90%
The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present