WordPress security by component
Ads by WPQuads
Plugin description
Ads by WPQuads manages and displays advertising placements within WordPress posts, pages, widgets, and website layouts.
Ads by WPQuads (quick-adsense-reloaded) is a WordPress plugin with 6 published CVE records in this archive. The latest tracked vulnerability was published Jun 29, 2026; the highest published CVSS base score is 9.3.
Plugin slug:
quick-adsense-reloadedLatest vulnerability
CVE-2026-57335: Ads by WPQuads: Broken access control
Ads by WPQuads is affected by broken access control. Exploitation requires an authenticated subscriber account. A successful request can reach data or an operation that should be restricted to another user or a more privileged role. The published affected range is n/a through 3.0.3.
| Safe version |
|
||
|---|---|---|---|
| Jun 29, 2026 |
CVE-2026-57335
Ads by WPQuads: Broken access control
Ads by WPQuads is affected by broken access control. Exploitation requires an authenticated subscriber account. A successful request can reach data or an operation that should be restricted to another user or a more privileged role. The published affected range is n/a through 3.0.3.
|
3.0.4 |
CVE6.5
NVDPending
|
| Jun 26, 2026 |
CVE-2026-54824
Ads by WPQuads: Sensitive information exposure
Ads by WPQuads is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller. The published affected range is n/a through 3.0.3.
|
3.0.4 |
CVE7.5
NVDPending
|
| May 27, 2026 |
CVE-2026-42744
Ads by WPQuads: A security weakness
Ads by WPQuads is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.0.2.
|
3.0.3 |
CVE6.5
NVDPending
|
| May 27, 2026 |
CVE-2026-42732
Ads by WPQuads: A security weakness
Ads by WPQuads is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.0.2.
|
3.0.3 |
CVE6.5
NVDPending
|
| Apr 01, 2025 |
CVE-2025-30876
Ads by WPQuads: SQL injection
Ads by WPQuads is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE9.3
NVDPending
|
| Mar 31, 2025 |
CVE-2025-30855
Ads by WPQuads: A security weakness
Ads by WPQuads is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE7.5
NVDPending
|