Skip to contentSpacetime Ad Inserter vulnerabilities
- ad inserter inserter, spacetime ad inserter +1 moreWordPress Ad Inserter plugin <= 2.8.19 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1050777.1 High
- spacetime ad inserter – ad manager & adsense adsAd Inserter <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via 's' Search ParameterCVE-2026-1029056.5 Medium
- spacetime ad inserter – ad manager & adsense adsAd Inserter <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL ParametersCVE-2026-890974.3 Medium
- spacetime ad inserter – ad manager & adsense adsAd Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search ParameterCVE-2026-894276.1 Medium
- spacetime ad inserter – ad manager & adsense adsAd Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header)CVE-2026-199026.1 Medium
- ad inserter inserter, spacetime ad inserter +1 moreWordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-970777.1 High
- spacetime ad inserter – ad manager & adsense adsAd Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' ParameterCVE-2026-119845.3 Medium
- spacetime ad inserter – ad manager & adsense adsAd Inserter <= 2.8.16 - Missing Authorization to Block Visibility Bypass via ai_ajaxCVE-2026-119835.3 Medium
- ad inserter inserter, spacetime ad inserter +1 moreWordPress Ad Inserter plugin <= 2.8.11 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-576936.5 Medium
- spacetime ad inserter – ad manager & adsense adsAd Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode AttributeCVE-2026-119004.3 Medium
- spacetime ad inserter – ad manager & adsense adsAd Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe ModeCVE-2026-92806.1 Medium
- spacetime ad inserter – ad manager & adsense adsAd Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom FieldCVE-2025-117456.4 Medium
- ad inserter inserter, spacetime ad inserter +1 moreWordPress Ad Inserter plugin <= 2.7.37 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-492487.1 High
- ad inserter project inserter, spacetime ad inserter – ad manager & adsense ads +1 moreAd Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-feCVE-2023-46685.3 Medium
- igorfuna ad inserter, spacetime ad inserter – ad manager & adsense ads +1 moreAd Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajaxCVE-2023-46455.3 Medium
- ad inserter project inserter, notfound ad inserter pro, spacetime ad inserter – ad manager & adsense ads +2 moreAd Inserter < 2.7.12 - Reflected Cross-Site ScriptingCVE-2022-09016.1 Medium
- ad inserter pro project inserter pro, ad inserter project inserter, notfound ad inserter pro +1 more +3 moreAd Inserter < 2.7.10 - Reflected Cross-Site ScriptingCVE-2022-02886.1 Medium