SP
Vendor
spacetime
11
CVEs
0
On KEV
4
New 30D
Products
AI6.4
Ad Inserter – Ad Manager & AdSense Ads
spacetime
8 CVEs0 on KEV3 new
AI7.1
Ad Inserter
Spacetime
3 CVEs0 on KEV1 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-89097 | AI Ad Inserter – Ad Manager & AdSense Ads spacetime | 4.3 | Oct 13 | Ad Inserter <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters |
| CVE-2026-89427 | AI Ad Inserter – Ad Manager & AdSense Ads spacetime | 6.1 | Oct 1 | Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter |
| CVE-2026-19902 | AI Ad Inserter – Ad Manager & AdSense Ads spacetime | 6.1 | Oct 1 | Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header) |
| CVE-2026-97077 | AI Ad Inserter Spacetime | 7.1 | Sep 30 | WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-11984 | AI Ad Inserter – Ad Manager & AdSense Ads spacetime | 5.3 | Sep 16 | Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter |
| CVE-2026-11983 | AI Ad Inserter – Ad Manager & AdSense Ads spacetime | 5.3 | Aug 6 | Ad Inserter <= 2.8.16 - Missing Authorization to Block Visibility Bypass via ai_ajax |
| CVE-2026-57693 | AI Ad Inserter Spacetime | 6.5 | Jul 13 | WordPress Ad Inserter plugin <= 2.8.11 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-11900 | AI Ad Inserter – Ad Manager & AdSense Ads spacetime | 4.3 | Jul 3 | Ad Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode Attribute |
| CVE-2026-9280 | AI Ad Inserter – Ad Manager & AdSense Ads spacetime | 6.1 | Jun 6 | Ad Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe Mode |
| CVE-2025-11745 | AI Ad Inserter – Ad Manager & AdSense Ads spacetime | 6.4 | Nov 5 | Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field |
| CVE-2024-49248 | AI Ad Inserter Spacetime | 7.1 | Oct 17 | WordPress Ad Inserter plugin <= 2.7.37 - Reflected Cross Site Scripting (XSS) vulnerability |