scripteo records
8 published records for vendor scripteo.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')3
- CWE-352 Cross-Site Request Forgery (CSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
52Plan | CVE-2025-4380Proof of concept | Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusionscripteo · ads pro · CWE-98 | Critical9.8 | — | 42.8% | Jul 2, 2025 |
39Monitor | CVE-2025-4689No exploit | Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Executionscripteo · ads pro · CWE-98 | Critical9.8 | — | 0.6% | Jul 2, 2025 |
39Monitor | CVE-2024-52428No exploit | WordPress Ads Booster by Ads Pro plugin <= 1.12 - Local File Inclusion vulnerabilityscripteo · ads booster by ads pro · CWE-98 | Critical9.8 | — | 0.5% | Nov 18, 2024 |
35Monitor | CVE-2025-6459No exploit | Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Cross-Site Request Forgery to PHP Code Injection in bsaCreateAdTemplatescripteo · ads pro · CWE-352 | High8.8 | — | 0.2% | Jul 2, 2025 |
31Monitor | CVE-2024-13322Proof of concept | Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injectionscripteo · ads pro · CWE-89 | High7.5 | — | 1.8% | May 2, 2025 |
30Monitor | CVE-2025-4381No exploit | Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injectionscripteo · ads pro · CWE-89 | High7.5 | — | 0.3% | Jul 2, 2025 |
30Monitor | CVE-2025-5339No exploit | Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id'scripteo · ads pro · CWE-89 | High7.5 | — | 0.3% | Jul 2, 2025 |
30Monitor | CVE-2025-6437No exploit | Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oidscripteo · ads pro · CWE-89 | High7.5 | — | 0.3% | Jul 2, 2025 |
- CVE-2025-438052Plan
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion
CriticalCVSS 9.8Proof of conceptEPSS 43%scripteo · ads proJul 2, 2025
- CVE-2025-468939Monitor
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Execution
CriticalCVSS 9.8No exploitEPSS 1%scripteo · ads proJul 2, 2025
- CVE-2024-5242839Monitor
WordPress Ads Booster by Ads Pro plugin <= 1.12 - Local File Inclusion vulnerability
CriticalCVSS 9.8No exploitEPSS 1%scripteo · ads booster by ads proNov 18, 2024
- CVE-2025-645935Monitor
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Cross-Site Request Forgery to PHP Code Injection in bsaCreateAdTemplate
HighCVSS 8.8No exploitEPSS 0%scripteo · ads proJul 2, 2025
- CVE-2024-1332231Monitor
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injection
HighCVSS 7.5Proof of conceptEPSS 2%scripteo · ads proMay 2, 2025
- CVE-2025-438130Monitor
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection
HighCVSS 7.5No exploitEPSS 0%scripteo · ads proJul 2, 2025
- CVE-2025-533930Monitor
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id'
HighCVSS 7.5No exploitEPSS 0%scripteo · ads proJul 2, 2025
- CVE-2025-643730Monitor
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oid
HighCVSS 7.5No exploitEPSS 0%scripteo · ads proJul 2, 2025