Advanced Ads GmbH vulnerabilities

Products

• Advanced Ads – Tracking 2
• Advanced Ads – Ad Manager & AdSense 1

Latest Advanced Ads GmbH CVEs

Newest publication first

1. CVE-2026-115603 WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability

   Published 2026-10-28

   High·CVSS 8.5 EPSS 0.21%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Advanced Ads GmbH Advanced Ads – Tracking advanced-ads-tracking allows Blind SQL Injection.This issue affects Advanced Ads – Tracking: from n/a before 4.0.0.

2. CVE-2025-59554 WordPress Advanced Ads – Tracking plugin < 3.0.7 - SQL Injection vulnerability

   Published 2026-06-17

   Critical·CVSS 9.3 EPSS 0.40%

   Unauthenticated SQL Injection in Advanced Ads – Tracking < 3.0.7 versions.

3. CVE-2022-32776 WordPress Advanced Ads – Ad Manager & AdSense plugin <= 1.31.1 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

   Published 2022-11-08

   Medium·CVSS 4.8 EPSS 0.58%

   Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Advanced Ads GmbH Advanced Ads – Ad Manager & AdSense plugin <= 1.31.1 on WordPress.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.