smartdevth vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.2%	CVE-2025-3433Advanced Advertising System (WordPress plugin) · Open Redirect Medium6.1EPSS 0.2%2025-04-08CVE Database V5CVE-2025-3433 The Advanced Advertising System plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.3.1. This is due to insufficient validation on the redirect url supplied via the 'redir' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. EPSS 0.2%Vulnerability smartdevth CWE-601	CVE Database V5	2025-04-08
Critical	9.8	EPSS 0.6%	CVE-2024-49624Advanced Advertising System (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2024-10-20CVE Database V5CVE-2024-49624 Deserialization of Untrusted Data vulnerability in smartdevth Advanced Advertising System advanced-advertising-system allows Object Injection.This issue affects Advanced Advertising System: from n/a through <= 1.3.1. EPSS 0.6%Vulnerability smartdevth	CVE Database V5	2024-10-20

Page 1 of 1