WordPress ad-inserter has 8 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2023-1549 | The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users suc | high | 7.2 | <2.7.27 | 2.7.27 |
| CVE-2019-15324 | The ad-inserter plugin before 2.4.22 for WordPress has remote code execution. | high | 8.8 | <2.4.22 | 2.4.22 |
| CVE-2022-0901 | The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUEST_URI before outputting it back in an admi | medium | 6.1 | <2.7.12 | 2.7.12 |
| CVE-2022-0288 | The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the html_element_s | medium | 6.1 | <2.7.10 | 2.7.10 |
| CVE-2019-15323 | The ad-inserter plugin before 2.4.20 for WordPress has path traversal. | high | 7.5 | <2.4.20 | 2.4.20 |
| CVE-2015-9497 | The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php. | high | 8.8 | <1.5.3 | 1.5.3 |
| CVE-2023-4645 | The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai_ajax funct | medium | 5.3 | <=2.7.30 | – |
| CVE-2023-4668 | The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-proc | medium | 5.3 | <2.7.31 | 2.7.31 |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked