web-mv vulnerabilities

Products

• resads 3

Latest web-mv CVEs

Newest publication first

1. CVE-2025-23779 WordPress ResAds Plugin <= 2.0.5 - SQL Injection vulnerability

   Published 2025-01-16

   High·CVSS 7.6 EPSS 0.64%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in web-mv ResAds resads allows SQL Injection.This issue affects ResAds: from n/a through <= 2.0.5.

2. CVE-2024-12122 ResAds <= 2.0.6 - Reflected Cross-Site Scripting via Multiple Parameters

   Published 2025-01-09

   Medium·CVSS 6.1 EPSS 0.30%

   The ResAds plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in all versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

3. CVE-2015-7667 ResAds < 1.0.2 - Reflected Cross-Site Scripting

   Published 2017-12-27

   Medium·CVSS 6.1 EPSS 1.5%

   Multiple cross-site scripting (XSS) vulnerabilities in (1) templates/admanagement/admanagement.php and (2) templates/adspot/adspot.php in the ResAds plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.