Broadstreet

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Broadstreet

Information

Software Type Plugin
Software Slug broadstreet (view on wordpress.org)
Software Status Active
Software Author broadstreetads
Software Website broadstreetads.com
Software Downloads 50,481
Software Active Installs 700
Software Record Last Updated August 17, 2026

11 Vulnerabilities

Submit a Vulnerability
Broadstreet <= 1.52.2 - Authenticated (Subscriber+) Private Post Meta Disclosure via get_sponsored_meta
4.3
CVE-2026-1881
May 20, 2026
Researcher: Tarcísio Luchesi De Almeida Silva (Poystick)
Broadstreet <= 1.53.1 - Missing Authorization to Authenticated (Subscriber+) Advertiser Creation
4.3
CVE-2025-9988
May 12, 2026
Researcher: greenhats
Broadstreet <= 1.53.1 - Authenticated (Subscriber+) Information Disclosure
5.3
CVE-2025-9987
May 12, 2026
Researcher: greenhats
Broadstreet <= 1.53.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2025-9989
May 12, 2026
Researcher: greenhats
Broadstreet Ads <= 1.52.2 - Missing Authorization
4.3
CVE-2026-45210
Feb 21, 2026
Researcher: Nabil Irawan
Broadstreet Ads <= 1.52.1 - Missing Authorization
4.3
CVE-2025-69311
Jan 19, 2026
Researcher: Que Thanh Tuan
Broadstreet Ads <= 1.51.7 - Reflected Cross-Site Scripting
6.1
CVE-2025-4652
May 29, 2025
Researcher: Tommaso Gregori
Broadstreet <= 1.51.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-48113
May 16, 2025
Researcher: kmaron1n
Broadstreet <= 1.52.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2025-32211
Apr 7, 2025
Researcher: Kévin Mosbahi (Mika)
Broadstreet <= 1.51.1 - Cross-Site Request Forgery
4.3
CVE-2025-32270
Apr 4, 2025
Researcher: Nguyen Xuan Chien
Broadstreet <= 1.51.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via zone Parameter
6.4
CVE-2024-11825
Jan 24, 2025
Researcher: Peter Thaleikis
Title Status CVE ID CVSS Researchers Date
Broadstreet <= 1.52.2 - Authenticated (Subscriber+) Private Post Meta Disclosure via get_sponsored_meta Patched CVE-2026-1881 4.3 Tarcísio Luchesi De Almeida Silva (Poystick) May 20, 2026
Broadstreet <= 1.53.1 - Missing Authorization to Authenticated (Subscriber+) Advertiser Creation Patched CVE-2025-9988 4.3 greenhats May 12, 2026
Broadstreet <= 1.53.1 - Authenticated (Subscriber+) Information Disclosure Patched CVE-2025-9987 5.3 greenhats May 12, 2026
Broadstreet <= 1.53.1 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2025-9989 4.4 greenhats May 12, 2026
Broadstreet Ads <= 1.52.2 - Missing Authorization Patched CVE-2026-45210 4.3 Nabil Irawan February 21, 2026
Broadstreet Ads <= 1.52.1 - Missing Authorization Patched CVE-2025-69311 4.3 Que Thanh Tuan January 19, 2026
Broadstreet Ads <= 1.51.7 - Reflected Cross-Site Scripting Patched CVE-2025-4652 6.1 Tommaso Gregori May 29, 2025
Broadstreet <= 1.51.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-48113 6.4 kmaron1n May 16, 2025
Broadstreet <= 1.52.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting Patched CVE-2025-32211 6.4 Kévin Mosbahi (Mika) April 7, 2025
Broadstreet <= 1.51.1 - Cross-Site Request Forgery Patched CVE-2025-32270 4.3 Nguyen Xuan Chien April 4, 2025
Broadstreet <= 1.51.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via zone Parameter Patched CVE-2024-11825 6.4 Peter Thaleikis January 24, 2025

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation