Threats tagged 'ghsa-74q3-73gr-qrvx'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.4%	CVE-2026-11983Ad Inserter (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.4%2026-08-06CVE Database V5CVE-2026-11983 The Ad Inserter – Ad Manager & AdSense Ads WordPress plugin contains an authorization bypass vulnerability in all versions up to and including 2.8.16. This flaw arises from a missing capability check in the ai_ajax function, allowing unauthenticated attackers to view ad blocks restricted to administrators. The vulnerability has a medium severity rating with a CVSS score of 5.3. EPSS 0.4%Vulnerability spacetime CWE-862 #ghsa-74q3-73gr-qrvx	CVE Database V5	2026-08-06

Page 1 of 1