Medium · 4.3 CVE-2024-38751 EUVD-2024-37070GHSA-4wmw-j845-2p25

WordPress AdsforWP plugin <= 1.9.28 - Cross Site Request Forgery (CSRF) vulnerability

Published Jan 2, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Magazine3 Product: Google Adsense & Banner Ads by AdsforWP

Description

Cross-Site Request Forgery (CSRF) vulnerability in Magazine3 Google Adsense & Banner Ads by AdsforWP ads-for-wp allows Cross Site Request Forgery.This issue affects Google Adsense & Banner Ads by AdsforWP: from n/a through <= 1.9.28.

Affected products

Vendor	Product	Affected	Fixed
Magazine3	Google Adsense & Banner Ads by AdsforWP	≤ 1.9.28	—

References

https://patchstack.com/database/Wordpress/Plugin/ads-for-wp/vulnerability/wordpress-adsforwp-plugin-1-9-28-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry