PT-2026-90966 · Undefined · Undefined
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Quads Ads Manager for Google AdSense versions prior to 3.0.5
Description
The plugin fails to verify payment completion with the configured payment gateway before marking an ad-selling order as paid. This allows users with the ability to place orders to obtain paid ad placements without completing the actual payment process.
Recommendations
Update Quads Ads Manager for Google AdSense to version 3.0.5 or later.
Exploit
Fix
Insufficient Verification of Data Authenticity
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Undefined