scripteo

Products

ProductCVEsExploitedLatest
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager8–Nov 24, 2025
Ads Pro3–Feb 19, 2026

Exploited and recent CVEs

  • CVE-2026-25388 Medium 5.4 WordPress Ads Pro plugin <= 5.0 - Broken Access Control vulnerability 0.2%
  • CVE-2025-7402 High 7.5 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_id 0.3%
  • CVE-2025-5339 High 7.5 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id' 0.4%
  • CVE-2025-6437 High 7.5 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oid 0.4%
  • CVE-2025-4380 High 8.1 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion 42.5%
  • CVE-2025-6459 High 8.8 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Cross-Site Request Forgery to PHP Code Injection in bsaCreateAdTemplate 0.2%
  • CVE-2025-4381 High 7.5 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection 0.4%
  • CVE-2025-4689 Critical 9.8 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Execution 0.6%
  • CVE-2025-46444 High 8.1 WordPress Ads Pro plugin <= 4.89 - Local File Inclusion vulnerability 0.8%
  • CVE-2025-46464 Medium 6.5 WordPress Ads Pro plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-13322 High 7.5 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injection 1.8%