Vulnerabilities / Ad Inserter – Ad Manager & AdSense Ads
Ad Inserter – Ad Manager & AdSense Ads vulnerabilities
Advisories WPSec published for Ad Inserter – Ad Manager & AdSense Ads. Other sources may list more. Its attack surface: Ad Inserter – Ad Manager & AdSense Ads on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-29 | WPSEC-2026-1944 | Ad Inserter – Ad Manager & AdSense Ads <= 2.8.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via adinserter Shortcode Attribute Placeholders | Medium 4.9 | 2.8.20 |
| 2026-10-29 | WPSEC-2026-1943 | Ad Inserter – Ad Manager & AdSense Ads <= 2.8.19 - Reflected Cross-Site Scripting via Request URI in Debugging Tools and {url} Tag | Medium 4.7 | 2.8.20 |
| 2026-10-29 | WPSEC-2026-1942 | Ad Inserter – Ad Manager & AdSense Ads <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via Search Query and Post Data Tags | Medium 5.6 | 2.8.20 |
License: CC BY 4.0