CVE-2026-81655
Last modified
CVE-2026-81655 is a vulnerability of currently unknown severity. The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its settings pages, making it reachable by every logged in user under a configuration its own settings allow, and does not filter the content saved there, allowing users with a role as low as subscriber to store code which is then executed as PHP or served unescaped to site visitors..
Description
The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its settings pages, making it reachable by every logged in user under a configuration its own settings allow, and does not filter the content saved there, allowing users with a role as low as subscriber to store code which is then executed as PHP or served unescaped to site visitors.
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Ad Inserter | >= 2.8.12, < 2.8.19 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-81655?
How severe is CVE-2026-81655?
How do I fix CVE-2026-81655?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-81648The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2…10
- CVE-2026-81650The Photo Gallery, Sliders, Proofing and WordPress plugin …7.2
- CVE-2026-81651The Photo Gallery, Sliders, Proofing and WordPress plugin …3.1
- CVE-2026-81652The Photo Gallery, Sliders, Proofing and WordPress plugin …2.7
- CVE-2026-81653The Photo Gallery, Sliders, Proofing and WordPress plugin …4.2
- CVE-2026-81654The Photo Gallery, Sliders, Proofing and WordPress plugin …3.1
- CVE-2026-81656IBM Guardium Data Protection 12.2 is vulnerable to a SQL inj…8.8
- CVE-2026-81657IBM Guardium Data Protection 12.2 could allow a remote unaut…9.8
- CVE-2026-81658A flaw was found in Foreman. The template revision endpoint …6.5
- CVE-2026-81659Affected versions of Flowintel allow attacker-controlled not…7.1
- CVE-2026-8166Improper neutralization of input during web page generation …5.4
- CVE-2026-81660The Groundhogg — CRM, Newsletters, and Marketing Automation …8.8
Are you affected by CVE-2026-81655?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST