CVE-2025-12984

Name of the Vulnerable Software and Affected Versions Advanced Ads – Ad Manager & AdSense plugin for WordPress versions prior to 2.0.16

Description The Advanced Ads – Ad Manager & AdSense plugin for WordPress is susceptible to SQL Injection due to inadequate input validation and query preparation. Specifically, the order parameter is not properly sanitized, allowing authenticated attackers with Administrator-level access or higher to inject additional SQL queries into existing database queries. This could lead to the extraction of sensitive information from the database.

Recommendations Update the Advanced Ads – Ad Manager & AdSense plugin to version 2.0.16 or later.