PT-2025-47880 · WordPress · Ads Pro Plugin

Published 2025-11-24 · Updated 2025-11-26 · CVE-2025-7402

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager versions prior to 4.95

Description The Ads Pro Plugin for WordPress is susceptible to time-based SQL Injection through the site id parameter. Insufficient input validation and query preparation allow unauthenticated attackers to inject additional SQL queries into existing database queries, potentially enabling the extraction of sensitive information.

Recommendations Update Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager to a version later than 4.95.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-7402

Affected Products

Ads Pro Plugin

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-7402 · Security Note
• https://twitter.com/MNovofastovsky/status/1993610931558137863 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/5548b97d-14f0-4f50-b213-a19c02c240be?source=cve · Note
• https://twitter.com/VulmonFeeds/status/1992838631275332058 · Twitter Post
• https://t.me/CVEtracker/38053 · Telegram Post
• https://t.me/cveNotify/143740 · Telegram Post
• https://codecanyon.net/item/ads-pro-plugin-multipurpose-wordpress-advertising-manager/10275010 · Note
• https://twitter.com/CVEnew/status/1992820447562670103 · Twitter Post