{“lastseen”:””,”description”:”The Advanced Ads \u2013 Ad Manager \\u0026 AdSense plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 2.0.14. This is due to the plugin not properly verifying that a user is authorized to perform an action in the `placement_update_item()` function. This makes it possible for authenticated attackers, with subscriber-level access and above, to update ad placements, allowing them to change which ad or ad group a placement serves.”,”published”:”2026-02-19T03:25:17.396Z”,”modified”:”2026-02-19T03:25:17.396Z”,”type”:”cve”,”title”:”Advanced Ads \u2013 Ad Manager \\u0026 AdSense \\u003c= 2.0.14 – Missing Authorization to Authenticated (Subscriber+) Ad Placements Update”,”source”:”Wordfence”,”references”:”https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/id\/a1ad32fb-929e-4181-8789-df50a77a71ef?source=cve\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/advanced-ads\/tags\/2.0.13\/includes\/admin\/class-ajax.php#L886-L932\\nhttps:\/\/plugins.trac.wordpress.org\/changeset\/3427297″,”id”:”CVE-2025-12884″,”bulletinFamily”:””,”cwe”:[“CWE-284″],”cvelist”:null,”sourceData”:”monetizemore Advanced Ads \u2013\u00a0Ad Manager \\u0026 AdSense *”,”sourceHref”:””,”cvss”:{“score”:4.3,”severity”:”MEDIUM”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:N\/I:L\/A:N”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”Advanced Ads \u2013\u00a0Ad Manager \\u0026 AdSense”,”version”:”*”,”vendor”:”monetizemore”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”The Advanced Ads \u2013 Ad Manager \\u0026 AdSense plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 2.0.14. This is…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,123,12,21,13,7,11,5],"class_list":["post-41576","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-43","tag-exploit","tag-medium","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n