https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-4668.htmlhttps://patchthecve.com/cve/CVE-2023-4668.htmlWed, 17 Jun 2026 06:38:19 +0000MEDIUM 5.3: The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated attackers to extract sensitive data including installed plugins (present and active), active theme, varihttps://patchthecve.com/cve/CVE-2023-1549.htmlhttps://patchthecve.com/cve/CVE-2023-1549.htmlWed, 17 Jun 2026 05:28:14 +0000HIGH 7.2: The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is presenthttps://patchthecve.com/cve/CVE-2022-0901.htmlhttps://patchthecve.com/cve/CVE-2022-0901.htmlWed, 17 Jun 2026 04:21:27 +0000MEDIUM 6.1: The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUEST_URI before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode charactershttps://patchthecve.com/cve/CVE-2022-0288.htmlhttps://patchthecve.com/cve/CVE-2022-0288.htmlWed, 17 Jun 2026 04:20:17 +0000MEDIUM 6.1: The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the html_element_selection parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting