Medium 6.4
2025-11-05< 2.8.8
CVE-2025-11745
Ad Inserter – Ad Manager & AdSense Ads
Minimum safe version
2.8.8
Update to 2.8.8 or later to address 20 fixable vulnerabilities
Latest available2.8.15 ✓
Medium 5.1
2025-03-14< 2.8.1
WordPress Ad Inserter Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)
High 7.1
2024-10-17< 2.7.38
CVE-2024-49248
Medium 5.3
2023-10-19< 2.7.31
CVE-2023-4645
High 7.5
2023-10-20< 2.7.31
CVE-2023-4668
High 7.2
2023-05-15< 2.7.27
CVE-2023-1549
N/A
2015-08-13< 1.5.6
Ad Inserter <= 1.5.5 - Cross-Site Request Forgery to Cross-Site Scripting
N/A
2022-02-03< 2.7.11
Ad Inserter < 2.7.11 - Authenticated (Admin+) Remote Code Execution
N/A
< 1.5.6
Ad Inserter <= 1.5.5 - Authenticated Cross-Site Scripting (XSS)
N/A
< 2.7.11
wpscan.com
N/A
2015-05-08< 1.5.3
WordPress Ad Inserter Plugin 1.5.2 - CSRF
N/A
2015-08-13< 1.5.6
WordPress Ad Inserter Plugin <= 1.5.5 - Cross Site Scripting
N/A
2019-07-13< 2.4.20
WordPress Ad Inserter plugin <= 2.4.19 - Authenticated Path Traversal vulnerability
N/A
2019-07-15< 2.4.22
WordPress Ad Inserter plugin <= 2.4.21 - Authenticated Remote Code Execution (RCE) vulnerability
N/A
2022-02-03< 2.7.11
WordPress Ad Inserter plugin <= 2.7.10 - Admin+ RCE / Stored XSS vulnerability
Medium 6.1
2022-04-07< 2.7.12
Ad Inserter Free and Pro <= 2.7.11 - Reflected Cross-Site Scripting
High 8.8
2019-08-22< 2.4.22
CVE-2019-15324
High 7.5
2019-08-22< 2.4.20
CVE-2019-15323
High 8.8
2019-10-22< 1.5.3
CVE-2015-9497
Medium 6.1
2022-02-21< 2.7.12
CVE-2022-0288