Advanced Advertising System Vulnerabilities

The Advanced Advertising System plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.3.1. This is due to insufficient validation on the redirect url supplied via the 'redir' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious...

CVSS:

6.1

Affected:

up to 1.3.1

Fix:

No patched version reported

Disclosed:

Apr 7, 2025

CVE-2025-3433 on NVD →

The Advanced Advertising System plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.3.1 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain...

CVSS:

9.8

Affected:

up to 1.3.1

Fix:

No patched version reported

Disclosed:

Oct 18, 2024

CVE-2024-49624 on NVD →