Vulnerability Description
The Advanced Ads plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.0.14 via the 'change-ad__content' shortcode parameter. This allows authenticated attackers with editor-level permissions or above, to execute code on the server.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://plugins.trac.wordpress.org/browser/advanced-ads/tags/2.0.14/includes/ads
- https://plugins.trac.wordpress.org/changeset/3427297/advanced-ads#file9
- https://www.wordfence.com/threat-intel/vulnerabilities/id/f9e83561-aa71-4984-8a2
FAQ
What is CVE-2025-13592?
CVE-2025-13592 is a vulnerability with a CVSS score of 7.2 (HIGH). The Advanced Ads plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.0.14 via the 'change-ad__content' shortcode parameter. This allows authenticated attack...
How severe is CVE-2025-13592?
CVE-2025-13592 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-13592?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.