Description
The Quads Ads Manager for Google AdSense WordPress plugin before 3.0.5 does not verify payment completion with the configured payment gateway before marking an ad-selling order as paid, allowing users who can place an order to obtain a paid ad placement without payment.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Quads Ads Manager for Google AdSense | 3.0.4 – < 3.0.5 | 3.0.5 |
References
- https://wpscan.com/vulnerability/da063797-1c68-4164-a94b-9e9b628bcd75/ exploit vdb-entry technical-description