Ad Inserter – Ad Manager & AdSense Ads

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Ad Inserter – Ad Manager & AdSense Ads

Information

Software Type Plugin
Software Slug ad-inserter (view on wordpress.org)
Software Status Active
Software Author spacetime
Software Website adinserter.pro
Software Downloads 19,360,342
Software Active Installs 300,000
Software Record Last Updated October 16, 2026

Showing 1-20 of 24 Vulnerabilities

Submit a Vulnerability
Ad Inserter <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters
4.3
CVE-2026-89097
Oct 12, 2026
Researcher: Michal Kanas (Thor)
Ad Inserter – Ad Manager & AdSense Ads <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2026-107864
Oct 12, 2026
Researcher: nh4tvd
Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter
6.1
CVE-2026-89427
Sep 30, 2026
Researcher: Kuba
Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header)
6.1
CVE-2026-19902
Sep 30, 2026
Researcher: Yuto Hyakumoto
Ad Inserter 2.8.12 - 2.8.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2026-81655
Sep 25, 2026
Researcher: Jakub Herman
Ad Inserter – Ad Manager & AdSense Ads <= 2.8.18 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-97077
Sep 24, 2026
Researcher: Asim Alshaya
Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter
5.3
CVE-2026-11984
Sep 15, 2026
Researcher: Evan
Ad Inserter <= 2.8.16 - Missing Authorization to Block Visibility Bypass via ai_ajax
5.3
CVE-2026-11983
Aug 5, 2026
Researcher: AlexHenry
Ad Inserter – Ad Manager & AdSense Ads <= 2.8.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2026-57693
Jul 8, 2026
Researcher: timomangcut
Ad Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode Attribute
4.3
CVE-2026-11900
Jul 2, 2026
Researcher: nightward
Ad Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe Mode
6.1
CVE-2026-9280
Jun 5, 2026
Researcher: normaandersonfrank
Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
6.4
CVE-2025-11745
Nov 4, 2025
Researcher: Muhammad Yudha - DJ
Ad Inserter - Ad Manager and AdSense Ads <= 2.8.0 - Reflected Cross-Site Scripting
6.1
CVE-2025-22623
Mar 5, 2025
Researcher: Andres Roldan
Ad Inserter <= 2.7.37 - Reflected Cross-Site Scripting
6.1
CVE-2024-49248
Oct 14, 2024
Researcher: Rafie Muhammad
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax
5.3
CVE-2023-4645
Sep 22, 2023
Researcher: Marco Wotschka
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe
5.3
CVE-2023-4668
Sep 22, 2023
Researcher: Marco Wotschka
Ad Inserter <= 2.7.25 - Authenticated (Admin+) PHP Object Injection
7.2
CVE-2023-1549
Apr 19, 2023
Researcher: Nguyen Huu Do
Ad Inserter Free and Pro <= 2.7.11 - Reflected Cross-Site Scripting
6.1
CVE-2022-0901
Apr 7, 2022
Researcher: Taurus Omar
Ad Inserter < 2.7.11 - Authenticated (Admin+) Remote Code Execution
7.2
CVE ID Unknown
Feb 3, 2022
Researcher: Viktor Markopoulos
Ad Inserter <= 2.7.9 - Reflected Cross-Site Scripting
6.1
CVE-2022-0288
Jan 24, 2022
Researcher: Krzysztof Zając
Title Status CVE ID CVSS Researchers Date
Ad Inserter <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters Patched CVE-2026-89097 4.3 Michal Kanas (Thor) October 12, 2026
Ad Inserter – Ad Manager & AdSense Ads <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2026-107864 6.4 nh4tvd October 12, 2026
Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter Patched CVE-2026-89427 6.1 Kuba September 30, 2026
Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header) Patched CVE-2026-19902 6.1 Yuto Hyakumoto September 30, 2026
Ad Inserter 2.8.12 - 2.8.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting Patched CVE-2026-81655 6.4 Jakub Herman September 25, 2026
Ad Inserter – Ad Manager & AdSense Ads <= 2.8.18 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-97077 7.2 Asim Alshaya September 24, 2026
Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter Patched CVE-2026-11984 5.3 Evan September 15, 2026
Ad Inserter <= 2.8.16 - Missing Authorization to Block Visibility Bypass via ai_ajax Patched CVE-2026-11983 5.3 AlexHenry August 5, 2026
Ad Inserter – Ad Manager & AdSense Ads <= 2.8.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting Patched CVE-2026-57693 6.4 timomangcut July 8, 2026
Ad Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode Attribute Patched CVE-2026-11900 4.3 nightward July 2, 2026
Ad Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe Mode Patched CVE-2026-9280 6.1 normaandersonfrank June 5, 2026
Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field Patched CVE-2025-11745 6.4 Muhammad Yudha - DJ November 4, 2025
Ad Inserter - Ad Manager and AdSense Ads <= 2.8.0 - Reflected Cross-Site Scripting Patched CVE-2025-22623 6.1 Andres Roldan March 5, 2025
Ad Inserter <= 2.7.37 - Reflected Cross-Site Scripting Patched CVE-2024-49248 6.1 Rafie Muhammad October 14, 2024
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax Patched CVE-2023-4645 5.3 Marco Wotschka September 22, 2023
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe Patched CVE-2023-4668 5.3 Marco Wotschka September 22, 2023
Ad Inserter <= 2.7.25 - Authenticated (Admin+) PHP Object Injection Patched CVE-2023-1549 7.2 Nguyen Huu Do April 19, 2023
Ad Inserter Free and Pro <= 2.7.11 - Reflected Cross-Site Scripting Patched CVE-2022-0901 6.1 Taurus Omar April 7, 2022
Ad Inserter < 2.7.11 - Authenticated (Admin+) Remote Code Execution Patched 7.2 Viktor Markopoulos February 3, 2022
Ad Inserter <= 2.7.9 - Reflected Cross-Site Scripting Patched CVE-2022-0288 6.1 Krzysztof Zając January 24, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation