Resads Vulnerabilities

The ResAds plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 2.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above,...

CVSS:

4.9

Affected:

up to 2.0.5

Fix:

No patched version reported

Disclosed:

Jan 16, 2025

CVE-2025-23779 on NVD →

[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in web-mv.de ResAds allows SQL Injection.This issue affects ResAds: from n/a through 2.0.5.

Affected:

up to 2.0.5

Fix:

No patched version reported

Disclosed:

Jan 16, 2025

CVE-2025-23779 on NVD →

[en] The ResAds plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in all versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute...

Affected:

up to 2.0.6

Fix:

No patched version reported

Disclosed:

Jan 9, 2025

CVE-2024-12122 on NVD →

The ResAds plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in all versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if th...

CVSS:

6.1

Affected:

up to 2.0.6

Fix:

No patched version reported

Disclosed:

Jan 8, 2025

CVE-2024-12122 on NVD →

[en] Multiple cross-site scripting (XSS) vulnerabilities in (1) templates/admanagement/admanagement.php and (2) templates/adspot/adspot.php in the ResAds plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter.

Affected:

up to 1.0.2

Fixed in:

1.0.2

Disclosed:

Dec 27, 2017

CVE-2015-7667 on NVD →

Multiple cross-site scripting (XSS) vulnerabilities in (1) templates/admanagement/admanagement.php and (2) templates/adspot/adspot.php in the ResAds plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter.

CVSS:

6.1

Affected:

up to 1.0.2

Fixed in:

1.0.2

Disclosed:

Oct 4, 2015

CVE-2015-7667 on NVD →