Spacetime vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20241
3. 20251
4. 202611

Newest CVEs

• CVE-2026-105077

  WordPress Ad Inserter plugin <= 2.8.19 - Cross Site Scripting (XSS) vulnerability

  Spacetime · Ad Inserter

  High7.1
• CVE-2026-102905

  Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter

  spacetime · Ad Inserter – Ad Manager & AdSense Ads

  Medium6.5
• CVE-2026-89097

  Ad Inserter <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters

  spacetime · Ad Inserter – Ad Manager & AdSense Ads

  Medium4.3
• CVE-2026-89427

  Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter

  spacetime · Ad Inserter – Ad Manager & AdSense Ads

  Medium6.1
• CVE-2026-19902

  Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header)

  spacetime · Ad Inserter – Ad Manager & AdSense Ads

  Medium6.1
• CVE-2026-97077

  WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability

  Spacetime · Ad Inserter

  High7.1
• CVE-2026-11984

  Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter

  spacetime · Ad Inserter – Ad Manager & AdSense Ads

  Medium5.3
• CVE-2026-11983

  Ad Inserter <= 2.8.16 - Missing Authorization to Block Visibility Bypass via ai_ajax

  spacetime · Ad Inserter – Ad Manager & AdSense Ads

  Medium5.3
• CVE-2026-57693

  WordPress Ad Inserter plugin <= 2.8.11 - Cross Site Scripting (XSS) vulnerability

  Spacetime · Ad Inserter

  Medium6.5
• CVE-2026-11900

  Ad Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode Attribute

  spacetime · Ad Inserter – Ad Manager & AdSense Ads

  Medium4.3