Advisories · Technology

Ad Inserter.

Every CVE that names Ad Inserter among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-81655 CVE record

CVSS 7.5 High

Ad Inserter 2.8.12 - 2.8.18 - Subscriber+ RCE / Stored XSS via Global Custom Fields
- Ad Inserter
- Code injection
Not analysed yet 27 Sept 2026
CVE-2025-22623 CVE record

CVSS 5.1 Medium

Ad Inserter - Reflected cross-site scripting (XSS)
- Ad Inserter
- Cross-site scripting (XSS)
Not analysed yet 6 Mar 2025
CVE-2023-1549 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

Ad Inserter < 2.7.27 - Admin+ PHP Object Injection
- Ad Inserter
Not analysed yet 15 May 2023