Broadstreetads

6 CVEs across 1 Broadstreetads products. Browse Broadstreetads vulnerabilities, severities, and proof-of-concept exploits.

Broadstreetads products with known CVEs

ProductCVEs
Broadstreet6
Broadstreetads CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-1881Medium4.32026-05-21The Broadstreet plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.52.2 via the get_sponsored_meta…
CVE-2025-9989Medium4.42026-05-13The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.53.1 due to insuff…
CVE-2025-9988Medium4.32026-05-13The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the create_advertiser AJAX action in all version…
CVE-2025-9987Medium5.32026-05-13The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the get_sponsored_meta()…
CVE-2025-4652Medium6.12025-06-09The Broadstreet WordPress plugin before 1.51.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Sit…
CVE-2024-11825Medium6.42025-01-25The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘zone’ parameter in all versions up to, and including, 1.51.0 due to…