Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-57693 EUVD-2026-43355GHSA-4m45-rw7q-jxxf

WordPress Ad Inserter plugin <= 2.8.11 - Cross Site Scripting (XSS) vulnerability

Published Jul 13, 2026 · Updated Jul 13, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spacetime Ad Inserter ad-inserter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ad Inserter: from n/a through <= 2.8.11.

Affected products

VendorProductAffectedFixed
Spacetime Ad Inserter ≤ 2.8.11 —

References