wordpress adserve vulnerabilities

Latest wordpress adserve CVEs

Newest publication first

1. CVE-2024-32604 WordPress WP-Recall plugin <= 16.26.5 - Insecure Direct Object References (IDOR) vulnerability

   Published 2024-04-18

   Medium·CVSS 4.3

   Authorization Bypass Through User-Controlled Key vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: from n/a through 16.26.5.

2. CVE-2022-41698 WordPress If Menu – Visibility control for Menus plugin <= 0.16.3 - Broken Access Control

   Published 2024-04-17

   Medium·CVSS 6.5

   Missing Authorization vulnerability in Layered If Menu.This issue affects If Menu: from n/a through 0.16.3.

3. CVE-2008-0507 AdServe < 0.3 - SQL Injection

   Published 2008-01-31

   High·CVSS 7.5 Public exploit

   SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.