Description
The Advanced Ads plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.0.14 via the 'change-ad__content' shortcode parameter. This allows authenticated attackers with editor-level permissions or above, to execute code on the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| monetizemore | Advanced Ads – Ad Manager & AdSense | ≤ 2.0.14 | — |