PT-2026-43653 · WordPress · Ads By Wpquads

Bas Albers · Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-42744

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Ads by WPQuads versions prior to 3.0.3

Description Improper validation of specified quantity in input allows for the manipulation of hidden fields.

Recommendations Update to a version newer than 3.0.2.

Fix

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2026-42744

Affected Products

Ads By Wpquads

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-42744 · Security Note
• https://twitter.com/VulmonFeeds/status/2059754466329366987 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/quick-adsense-reloaded/vulnerability/wordpress-ads-by-wpquads-plugin-3-0-2-bypass-vulnerability-vulnerability?_s_id=cve · Note