PatchTheCVEad inserter vulnerabilities and fixes
Recent CVEs affecting ad inserter, with upgrade or downgrade steps. 5 tracked.
Also searched as: adinserter.
ad inserter has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2023-10-20. Highest priority: CVE-2023-1549 (score 54/100).
- CVE-2023-4668 MEDIUM 5.3 UPGRADE The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including
- CVE-2023-4645 MEDIUM 5.3 UPGRADE The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including
- CVE-2023-1549 HIGH 7.2 UPGRADE The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could
- CVE-2022-0901 MEDIUM 6.1 UPGRADE The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUEST_URI before
- CVE-2022-0288 MEDIUM 6.1 UPGRADE UPGRADE The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise
FAQ
How do I fix ad inserter vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ad inserter being exploited right now?
None of the tracked ad inserter CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ad inserter CVE should I patch first?
CVE-2023-1549 currently ranks highest (54/100): The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could .