CVE-2025-12884

Name of the Vulnerable Software and Affected Versions Advanced Ads – Ad Manager & AdSense plugin for WordPress versions through 2.0.14

Description The Advanced Ads – Ad Manager & AdSense plugin for WordPress has an authorization issue in versions up to and including 2.0.14. The plugin does not properly validate user authorization when performing actions within the placement update item() function. This allows authenticated attackers with subscriber-level access or higher to modify ad placements, potentially changing the served ads or ad groups.

Recommendations Update to a version of Advanced Ads – Ad Manager & AdSense plugin for WordPress later than 2.0.14.