Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Resads - SQL Injection (CVE-2025-23779)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in web-mv ResAds resads allows SQL Injection.This issue affects ResAds: from n/a through
PLUGIN
Resads
CVE-2025-23779
Risk Score
Threat Entry
Updated 2026-06-17
Resads - Cross-Site Scripting (XSS) (CVE-2024-12122)
The ResAds plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in all versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
PLUGIN
Resads
CVE-2024-12122
Risk Score
Threat Entry
Updated 2026-06-17
Resads - Cross-Site Scripting (XSS) (CVE-2015-7667)
Multiple cross-site scripting (XSS) vulnerabilities in (1) templates/admanagement/admanagement.php and (2) templates/adspot/adspot.php in the ResAds plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter.
PLUGIN
Resads
CVE-2015-7667
Risk Score