Ad Inserter
Spacetime
Developer
2.8.20
Latest version
300,000
Installations
No date
Last updated
Vulnerability history
0 present
27 patched
12 Mitigation rules
- Unauthenticated Arbitrary Shortcode Execution vulnerability<= 2.8.196 days ago
- Cross Site Scripting (XSS) vulnerability<= 2.8.197 days ago
- Cross Site Scripting (XSS) vulnerability<= 2.8.1829/10/2026
- Cross Site Scripting (XSS) vulnerability<= 2.8.1826/10/2026
- Cross Site Scripting (XSS) vulnerability<= 2.8.1822/10/2026
- Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters vulnerability<= 2.8.1812/10/2026
- Cross Site Scripting (XSS) vulnerability<= 2.8.1812/10/2026
- Subscriber+ RCE / Stored XSS vulnerability2.8.12-2.8.1828/09/2026
- Cross Site Scripting (XSS) vulnerability<= 2.8.1824/09/2026
- Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter vulnerability<= 2.8.1615/09/2026
- Missing Authorization to Block Visibility Bypass vulnerability<= 2.8.1605/08/2026
- Cross Site Scripting (XSS) vulnerability<= 2.8.1108/07/2026
- Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure vulnerability<= 2.8.1602/07/2026
- Reflected Cross-Site Scripting vulnerability<= 2.8.1509/06/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field vulnerability<= 2.8.705/11/2025
- Reflected Cross-Site Scripting vulnerability<= 2.8.014/03/2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 2.7.3714/10/2024
- Unauthenticated Sensitive Information Exposure via ai_ajax vulnerability<= 2.7.3025/09/2023
- Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe vulnerability<= 2.7.3025/09/2023
- Auth. PHP Object Injection vulnerability< 2.7.2727/04/2023
- Reflected Cross-Site Scripting (XSS) vulnerability<= 2.7.1114/03/2022
- Admin+ RCE / Stored XSS vulnerability<= 2.7.1003/02/2022
- Reflected Cross-Site Scripting (XSS) vulnerability<= 2.7.924/01/2022
- Authenticated Remote Code Execution (RCE) vulnerability<= 2.4.2115/07/2019
- Authenticated Path Traversal vulnerability<= 2.4.1913/07/2019
- Cross Site Scripting<= 1.5.513/08/2015
- CSRF<= 1.5.208/05/2015