Log in Start free

Spacetime

Products

ProductCVEsExploitedLatest
Ad Inserter – Ad Manager & AdSense Ads11–Oct 30, 2026
Ad Inserter4–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-105077 High 7.1 WordPress Ad Inserter plugin <= 2.8.19 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-102905 Medium 6.5 Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter 0.4%
  • CVE-2026-89097 Medium 4.3 Ad Inserter <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters 0.2%
  • CVE-2026-89427 Medium 6.1 Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter 0.3%
  • CVE-2026-19902 Medium 6.1 Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header) 0.3%
  • CVE-2026-97077 High 7.1 WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-11984 Medium 5.3 Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter 0.4%
  • CVE-2026-11983 Medium 5.3 Ad Inserter <= 2.8.16 - Missing Authorization to Block Visibility Bypass via ai_ajax 0.4%
  • CVE-2026-57693 Medium 6.5 WordPress Ad Inserter plugin <= 2.8.11 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-11900 Medium 4.3 Ad Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode Attribute 0.5%
  • CVE-2026-9280 Medium 6.1 Ad Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe Mode 0.4%
  • CVE-2025-11745 Medium 6.4 Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field 0.2%
  • CVE-2024-49248 High 7.1 WordPress Ad Inserter plugin <= 2.7.37 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-4668 Medium 5.3 Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe 0.6%
  • CVE-2023-4645 Medium 5.3 Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax 0.8%