{"items":[{"id":"CVE-2026-105077","published":"2026-10-30T18:30:42.711Z","updated":"2026-10-30T19:00:18.568Z","title":"WordPress Ad Inserter plugin <= 2.8.19 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Spacetime","product":"Ad Inserter","kev":false,"epss":0.00228,"kevAdded":null},{"id":"CVE-2026-102905","published":"2026-10-30T17:15:29.355Z","updated":"2026-10-30T17:24:48.214Z","title":"Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter","severity":"MEDIUM","score":6.5,"vendor":"spacetime","product":"Ad Inserter – Ad Manager & AdSense Ads","kev":false,"epss":0.00422,"kevAdded":null},{"id":"CVE-2026-89097","published":"2026-10-13T07:46:22.727Z","updated":"2026-10-15T16:43:51.986Z","title":"Ad Inserter <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters","severity":"MEDIUM","score":4.3,"vendor":"spacetime","product":"Ad Inserter – Ad Manager & AdSense Ads","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2026-89427","published":"2026-10-01T08:28:45.082Z","updated":"2026-10-03T15:42:51.455Z","title":"Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter","severity":"MEDIUM","score":6.1,"vendor":"spacetime","product":"Ad Inserter – Ad Manager & AdSense Ads","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-19902","published":"2026-10-01T07:40:23.197Z","updated":"2026-10-03T15:42:52.231Z","title":"Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header)","severity":"MEDIUM","score":6.1,"vendor":"spacetime","product":"Ad Inserter – Ad Manager & AdSense Ads","kev":false,"epss":0.00259,"kevAdded":null},{"id":"CVE-2026-97077","published":"2026-09-30T12:27:52.515Z","updated":"2026-09-30T13:27:07.680Z","title":"WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Spacetime","product":"Ad Inserter","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2026-11984","published":"2026-09-16T03:28:18.607Z","updated":"2026-09-16T18:36:33.492Z","title":"Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter","severity":"MEDIUM","score":5.3,"vendor":"spacetime","product":"Ad Inserter – Ad Manager & AdSense Ads","kev":false,"epss":0.00364,"kevAdded":null},{"id":"CVE-2026-11983","published":"2026-08-06T11:29:20.345Z","updated":"2026-08-06T15:00:43.027Z","title":"Ad Inserter <= 2.8.16 - Missing Authorization to Block Visibility Bypass via ai_ajax","severity":"MEDIUM","score":5.3,"vendor":"spacetime","product":"Ad Inserter – Ad Manager & AdSense Ads","kev":false,"epss":0.00431,"kevAdded":null},{"id":"CVE-2026-57693","published":"2026-07-13T08:41:24.533Z","updated":"2026-07-13T16:07:51.470Z","title":"WordPress Ad Inserter plugin <= 2.8.11 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Spacetime","product":"Ad Inserter","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2026-11900","published":"2026-07-03T07:53:08.023Z","updated":"2026-07-07T17:01:17.535Z","title":"Ad Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode Attribute","severity":"MEDIUM","score":4.3,"vendor":"spacetime","product":"Ad Inserter – Ad Manager & AdSense Ads","kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2026-9280","published":"2026-06-06T02:28:34.218Z","updated":"2026-06-06T11:43:59.185Z","title":"Ad Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe Mode","severity":"MEDIUM","score":6.1,"vendor":"spacetime","product":"Ad Inserter – Ad Manager & AdSense Ads","kev":false,"epss":0.0036,"kevAdded":null},{"id":"CVE-2025-11745","published":"2025-11-05T11:24:40.781Z","updated":"2026-04-08T17:06:23.068Z","title":"Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field","severity":"MEDIUM","score":6.4,"vendor":"spacetime","product":"Ad Inserter – Ad Manager & AdSense Ads","kev":false,"epss":0.00231,"kevAdded":null},{"id":"CVE-2024-49248","published":"2024-10-17T19:35:31.749Z","updated":"2026-04-29T09:51:53.265Z","title":"WordPress Ad Inserter plugin <= 2.7.37 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Spacetime","product":"Ad Inserter","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2023-4668","published":"2023-10-20T07:29:32.176Z","updated":"2026-04-08T17:24:23.412Z","title":"Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe","severity":"MEDIUM","score":5.3,"vendor":"spacetime","product":"Ad Inserter – Ad Manager & AdSense Ads","kev":false,"epss":0.00606,"kevAdded":null},{"id":"CVE-2023-4645","published":"2023-10-19T01:53:49.809Z","updated":"2026-04-08T16:54:26.956Z","title":"Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax","severity":"MEDIUM","score":5.3,"vendor":"spacetime","product":"Ad Inserter – Ad Manager & AdSense Ads","kev":false,"epss":0.00767,"kevAdded":null}]}