Advisories · Technology
scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager.
Every CVE that names scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_id
- scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager
- SQL injection
- CVSS 7.5 High
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id'
- scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager
- SQL injection
- CVSS 7.5 High
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oid
- scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager
- SQL injection
- CVSS 8.1 HighCritical · CVSS 7+ and EPSS
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion
- scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager
- File inclusion
- CVSS 8.8 High
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Cross-Site Request Forgery to PHP Code Injection in bsaCreateAdTemplate
- scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager
- Cross-site request forgery (CSRF)
- CVSS 7.5 High
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection
- scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Execution
- scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager
- File inclusion
- CVSS 7.5 High
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injection
- scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager
- SQL injection