Broadstreet vulnerabilities

Products

• Broadstreet Ads 5
• Ad Widget 1

Latest Broadstreet CVEs

Newest publication first

1. CVE-2017-20289 Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local File Inclusion via step parameter

   Published 2026-10-22

   High·CVSS 7.7 EPSS 0.93%

   Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP files by passing unsanitized input to require in views/modal/index.php. Attackers can supply directory trave...

2. CVE-2026-45210 WordPress Broadstreet Ads plugin <= 1.52.2 - Broken Access Control vulnerability

   Published 2026-05-12

   Medium·CVSS 5.4 EPSS 0.17%

   Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through <= 1.52.2.

3. CVE-2025-69311 WordPress Broadstreet Ads plugin <= 1.52.1 - Broken Access Control vulnerability

   Published 2026-01-22

   High·CVSS 7.6 EPSS 0.27%

   Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through <= 1.52.1.

4. CVE-2025-48113 WordPress Broadstreet plugin <= 1.51.2 - Cross Site Scripting (XSS) vulnerability

   Published 2025-05-16

   Medium·CVSS 6.5 EPSS 0.21%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet Broadstreet Ads broadstreet allows Stored XSS.This issue affects Broadstreet Ads: from n/a through <= 1.51.2.

5. CVE-2025-32211 WordPress Broadstreet plugin <= 1.52.1 - Cross Site Scripting (XSS) vulnerability

   Published 2025-04-08

   Medium·CVSS 6.5 EPSS 0.23%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet Broadstreet Ads broadstreet allows Stored XSS.This issue affects Broadstreet Ads: from n/a through <= 1.52.1.

6. CVE-2025-32270 WordPress Broadstreet plugin <= 1.52.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

   Published 2025-04-04

   Medium·CVSS 4.3 EPSS 0.19%

   Cross-Site Request Forgery (CSRF) vulnerability in Broadstreet Broadstreet Ads broadstreet allows Cross Site Request Forgery.This issue affects Broadstreet Ads: from n/a through <= 1.52.1.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.