AI
Product
Ad Inserter – Ad Manager & AdSense Ads
10
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 1Medium 9Low 0
Watch
Add Ad Inserter – Ad Manager & AdSense Ads to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4668 | 7.5 | Oct 20 | Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe Affected: through 2.7.30 |
| CVE-2025-11745 | 6.4 | Nov 5 | Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field Affected: through 2.8.7 |
| CVE-2026-89427 | 6.1 | Oct 1 | Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter Affected: through 2.8.18 |
| CVE-2026-19902 | 6.1 | Oct 1 | Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header) Affected: through 2.8.18 |
| CVE-2026-9280 | 6.1 | Jun 6 | Ad Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe Mode Affected: through 2.8.15 |
| CVE-2026-11984 | 5.3 | Sep 16 | Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter Affected: through 2.8.16 |
| CVE-2026-11983 | 5.3 | Aug 6 | Ad Inserter <= 2.8.16 - Missing Authorization to Block Visibility Bypass via ai_ajax Affected: through 2.8.16 |
| CVE-2023-4645 | 5.3 | Oct 19 | Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax Affected: through 2.7.30 |
| CVE-2026-89097 | 4.3 | Oct 13 | Ad Inserter <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters Affected: through 2.8.18 |
| CVE-2026-11900 | 4.3 | Jul 3 | Ad Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode Attribute Affected: through 2.8.16 |
Showing 10