Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2025-13592

Advanced Ads <= 2.0.14 - Authenticated (Editor+) Remote Code Execution via Shortcode

Description

The Advanced Ads plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.0.14 via the 'change-ad__content' shortcode parameter. This allows authenticated attackers with editor-level permissions or above, to execute code on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

monetizemore Advanced Ads – Ad Manager & AdSense

Default version status: unaffected

  • 0 to ≤ 2.0.14affected

References