{
 "id": "WPSEC-2026-1032",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1032/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1032/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1032/index.md",
 "title": "Advanced Ads – Ad Manager & AdSense <= 2.0.26 - Authenticated (Editor+) Sensitive Information Exposure via Author Search",
 "description": "The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to Sensitive Information Exposure via the 'advads-authors-search' AJAX action in all versions up to, and including, 2.0.26. This is due to the search_authors() function returning complete WP_User objects as JSON instead of only the fields the search needs. This makes it possible for authenticated attackers with ad editing rights to retrieve the email addresses, password hashes and password reset key hashes of users who can edit posts, including administrators. Ad editing rights belong to editors when the 'Allow editors to manage ads' setting is enabled.",
 "plugin": {
  "slug": "advanced-ads",
  "name": "Advanced Ads – Ad Manager & AdSense",
  "full_name": "Advanced Ads – Ad Manager & AdSense",
  "wordpress_org": "https://wordpress.org/plugins/advanced-ads/",
  "advisories_url": "https://wpsec.com/vuln/plugin/advanced-ads/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/advanced-ads"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-200"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 4.9,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "2.0.27",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 2.0.27"
  ]
 },
 "introduced_in": null,
 "fixed_in": "2.0.27",
 "remediation": "Update to 2.0.27 or later.",
 "fix_released": "2026-10-14T13:32:08+00:00",
 "published": "2026-10-15T13:50:16+00:00",
 "updated": "2026-10-14T19:51:19.790982+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1032/",
  "https://plugins.svn.wordpress.org/advanced-ads/tags/2.0.27/",
  "https://wordpress.org/plugins/advanced-ads/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/advanced-ads",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "High",
  "affected_versions": "High",
  "as_of": "2026-10-15"
 }
}