Ads For Wp Vulnerabilities

The Google Adsense & Banner Ads by AdsforWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.9.28. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged r...

CVSS:

4.3

Affected:

up to 1.9.28

Fixed in:

1.9.29

Disclosed:

Jul 11, 2024

CVE-2024-38751 on NVD →

The AdsforWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to gain otherwise restricted access to administrative actions via a forged...

CVSS:

8.8

Affected:

up to 1.8

Fixed in:

1.9

Disclosed:

Jun 26, 2019

The Google Adsense & Banner Ads by AdsforWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘adsforwp_profile_entry’ parameter in versions up to, and including, 1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrato...

CVSS:

6.4

Affected:

up to 1.6

Fixed in:

1.6

Disclosed:

Mar 26, 2019