AP
Product
Ads Pro
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 2Low 0
Watch
Add Ads Pro to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-4380 | 9.8 | Jul 2 | Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion Affected: through 4.89 |
| CVE-2025-4689 | 9.8 | Jul 2 | Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Execution Affected: through 4.89 |
| CVE-2025-6459 | 8.8 | Jul 2 | Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Cross-Site Request Forgery to PHP Code Injection in bsaCreateAdTemplate Affected: through 4.89 |
| CVE-2025-46444 | 8.1 | May 23 | WordPress Ads Pro plugin <= 4.89 - Local File Inclusion vulnerability Affected: through 4.89 |
| CVE-2025-5339 | 7.5 | Jul 2 | Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id' Affected: through 4.89 |
| CVE-2025-6437 | 7.5 | Jul 2 | Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oid Affected: through 4.89 |
| CVE-2025-4381 | 7.5 | Jul 2 | Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection Affected: through 4.89 |
| CVE-2024-13322 | 7.5 | May 2 | Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injection Affected: before 4.89 |
| CVE-2025-46464 | 6.5 | May 16 | WordPress Ads Pro plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability Affected: through 5.0 |
| CVE-2026-25388 | 5.4 | Feb 19 | WordPress Ads Pro plugin <= 5.0 - Broken Access Control vulnerability Affected: through 5.0 |
Showing 10
