https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T07:10:23.690862+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-81655 fkie_cve-2026-81655 2026-09-28T07:10:23.693014+00:00

The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its settings pages, making it reachable by every logged in user under a configuration its own settings allow, and does not filter the content saved there, allowing users with a role as low as subscriber to store code which is then executed as PHP or served unescaped to site visitors.

 https://db.gcve.eu/vuln/ghsa-8f3r-fqj2-gfj6 GHSA-8f3r-fqj2-gfj6 2026-09-28T07:10:23.693092+00:00

The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its settings pages, making it reachable by every logged in user under a configuration its own settings allow, and does not filter the content saved there, allowing users with a role as low as subscriber to store code which is then executed as PHP or served unescaped to site visitors.