scripteo
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager | 8 | – | Nov 24, 2025 |
| Ads Pro | 3 | – | Feb 19, 2026 |
Exploited and recent CVEs
- CVE-2026-25388 WordPress Ads Pro plugin <= 5.0 - Broken Access Control vulnerability 0.2%
- CVE-2025-7402 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_id 0.3%
- CVE-2025-5339 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id' 0.4%
- CVE-2025-6437 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oid 0.4%
- CVE-2025-4380 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion 42.5%
- CVE-2025-6459 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Cross-Site Request Forgery to PHP Code Injection in bsaCreateAdTemplate 0.2%
- CVE-2025-4381 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection 0.4%
- CVE-2025-4689 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Execution 0.6%
- CVE-2025-46444 WordPress Ads Pro plugin <= 4.89 - Local File Inclusion vulnerability 0.8%
- CVE-2025-46464 WordPress Ads Pro plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-13322 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injection 1.8%