scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Latest scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager vulnerabilities

CVE-2026-25388 — WordPress Ads Pro plugin <= 5.0 - Broken Access Control vulnerability (CVSS 5.4)
CVE-2025-7402 — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_id (CVSS 7.5)
CVE-2025-6459 — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Cross-Site Request Forgery to PHP Code Injection in bsaCreateAdTemplate (CVSS 8.8)
CVE-2025-6437 — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oid (CVSS 7.5)
CVE-2025-5339 — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id' (CVSS 7.5)
CVE-2025-4689 — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Execution (CVSS 9.8)
CVE-2025-4381 — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection (CVSS 7.5)
CVE-2025-4380 — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion (CVSS 9.8)
CVE-2025-46444 — WordPress Ads Pro plugin <= 4.89 - Local File Inclusion vulnerability (CVSS 8.1)
CVE-2025-46464 — WordPress Ads Pro plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
CVE-2024-13322 — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injection (CVSS 7.5)