Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Ad Inserter Free and Pro - Cross-Site Scripting (XSS) (CVE-2022-0901)
The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUEST_URI before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters
PLUGIN
Ad Inserter Free and Pro
CVE-2022-0901
Risk Score