scripteo Vulnerabilities and Affected Products
Vulnerabilities associated with Ads Pro.
Products
Clear product- Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager8 vulnerabilities
- Ads Pro3 vulnerabilities
- ads_booster1 vulnerability
- ads_pro1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-25388MEDIUM | WordPress Ads Pro plugin <= 5.0 - Broken Access Control vulnerabilityMissing Authorization vulnerability in scripteo Ads Pro ap-plugin-scripteo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ads Pro: from n/a through <= 5.0. CWE-862Feb 19, 2026 | CVSS5.4v3.1 | EPSS0.209% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-46444HIGH | WordPress Ads Pro plugin <= 4.89 - Local File Inclusion vulnerabilityImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in scripteo Ads Pro ap-plugin-scripteo allows PHP Local File Inclusion.This issue affects Ads Pro: from n/a through <= 4.89. CWE-98May 23, 2025 | CVSS8.1v3.1 | EPSS0.73% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-46464MEDIUM | WordPress Ads Pro plugin <= 5.0 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in scripteo Ads Pro ap-plugin-scripteo allows Stored XSS.This issue affects Ads Pro: from n/a through <= 5.0. CWE-79May 16, 2025 | CVSS6.5v3.1 | EPSS0.228% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |