Threats tagged 'ghsa-fj2x-6xr5-v7vj'

The Advanced Ads – Ad Manager & AdSense plugin for WordPress versions up to and including 2.0.12 contains a remote code execution vulnerability via the select_one() function. This occurs because the AJAX endpoint does not properly restrict access or limit callable functions, allowing unauthenticated attackers to invoke arbitrary functions starting with get_the_, such as get_the_excerpt, potentially exposing information.