Medium
CVE-2026-89427
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 24
Reset filters
Medium
CVE-2026-19902
Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header)
Medium
CVE-2026-81655
Ad Inserter 2.8.12 - 2.8.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-97077
Ad Inserter – Ad Manager & AdSense Ads <= 2.8.18 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-11984
Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter
Medium
CVE-2026-11983
Ad Inserter <= 2.8.16 - Missing Authorization to Block Visibility Bypass via ai_ajax
Medium
CVE-2026-57693
Ad Inserter – Ad Manager & AdSense Ads <= 2.8.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-11900
Ad Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode Attribute
Medium
CVE-2026-9280
Ad Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe Mode
Medium
CVE-2025-11745
Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
Medium
CVE-2025-22623
Ad Inserter - Ad Manager and AdSense Ads <= 2.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22680
Ad Inserter Pro <= 2.7.39 - Reflected Cross-Site Scripting
Medium
CVE-2024-49248
Ad Inserter <= 2.7.37 - Reflected Cross-Site Scripting
Medium
CVE-2023-4668
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe
Medium
CVE-2023-4645
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax
High
CVE-2023-1549
Ad Inserter <= 2.7.25 - Authenticated (Admin+) PHP Object Injection
High
d0a81d60-d489-4786-aa21-805a1e2aa198
Ad Inserter Pro <= 2.7.15 - Arbitrary File Modification
Medium
CVE-2022-0901
Ad Inserter Free and Pro <= 2.7.11 - Reflected Cross-Site Scripting
High
a596c9c4-ceb4-470c-8ad5-986cd62da91e
Ad Inserter < 2.7.11 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2022-0288
Ad Inserter <= 2.7.9 - Reflected Cross-Site Scripting
High
CVE-2019-15324
Ad Inserter <= 2.4.21 - Authenticated Remote Code Execution
High
CVE-2019-15323
Ad Inserter <= 2.4.19 - Authenticated Path Traversal
Medium
427c29e6-9bbe-4094-a2a2-46945525f5b3
Ad Inserter <= 1.5.5 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2015-9497
Ad Inserter – Ad Manager & AdSense Ads < 1.5.3 - Cross-Site Request Forgery to Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.