CVE-2025-10487

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10487", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-09-15T14:29:17.900Z", "datePublished": "2025-11-01T06:40:37.833Z", "dateUpdated": "2026-04-08T16:48:06.452Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:48:06.452Z"}, "affected": [{"vendor": "monetizemore", "product": "Advanced Ads \u2013\u00a0Ad Manager & AdSense", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.0.12", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Advanced Ads \u2013\u00a0Ad Manager & AdSense plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.12 via the select_one() function. This is due to the endpoint not properly restricting access to the AJAX endpoint or limiting the functions that can be called to safe functions. This makes it possible for unauthenticated attackers to call arbitrary functions beginning with get_the_ like get_the_excerpt which can make information exposure possible."}], "title": "Advanced Ads <= 2.0.12 - Unauthenticated Limited Code Execution", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3efe6b81-72db-4419-92a3-26e22ebf46e8?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3381123%40advanced-ads&new=3381123%40advanced-ads&sfp_email=&sfph_mail="}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')", "cweId": "CWE-94", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "baseScore": 7.3, "baseSeverity": "HIGH"}}], "credits": [{"lang": "en", "type": "finder", "value": "Michael Mazzolini"}], "timeline": [{"time": "2025-10-31T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-03T13:22:54.634298Z", "id": "CVE-2025-10487", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-03T13:30:40.805Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10487", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-03T13:22:54.634298Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-03T13:23:01.440Z"}}], "cna": {"title": "Advanced Ads <= 2.0.12 - Unauthenticated Limited Code Execution", "credits": [{"lang": "en", "type": "finder", "value": "Michael Mazzolini"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"}}], "affected": [{"vendor": "monetizemore", "product": "Advanced Ads \u2013\u00a0Ad Manager & AdSense", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "2.0.12"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-31T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3efe6b81-72db-4419-92a3-26e22ebf46e8?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3381123%40advanced-ads&new=3381123%40advanced-ads&sfp_email=&sfph_mail="}], "descriptions": [{"lang": "en", "value": "The Advanced Ads \u2013\u00a0Ad Manager & AdSense plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.12 via the select_one() function. This is due to the endpoint not properly restricting access to the AJAX endpoint or limiting the functions that can be called to safe functions. This makes it possible for unauthenticated attackers to call arbitrary functions beginning with get_the_ like get_the_excerpt which can make information exposure possible."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-11-01T06:40:37.833Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10487", "state": "PUBLISHED", "dateUpdated": "2025-11-03T13:30:40.805Z", "dateReserved": "2025-09-15T14:29:17.900Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-01T06:40:37.833Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Advanced Ads \u2013\u00a0Ad Manager & AdSense", "vendor": "monetizemore", "versions": [{"lessThanOrEqual": "2.0.12", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Advanced Ads \u2013\u00a0Ad Manager & AdSense plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.12 via the select_one() function. This is due to the endpoint not properly restricting access to the AJAX endpoint or limiting the functions that can be called to safe functions. This makes it possible for unauthenticated attackers to call arbitrary functions beginning with get_the_ like get_the_excerpt which can make information exposure possible."}, {"lang": "es", "value": "El plugin Advanced Ads - Ad Manager & AdSense para WordPress es vulnerable a la ejecuci\u00f3n remota de c\u00f3digo en todas las versiones hasta la 2.0.12, inclusive, a trav\u00e9s de la funci\u00f3n 'select_one()'. Esto se debe a que el endpoint no restringe adecuadamente el acceso al endpoint AJAX ni limita las funciones que pueden ser llamadas a funciones seguras. Esto hace posible que atacantes no autenticados llamen a funciones arbitrarias que comienzan con 'get_the_', como 'get_the_excerpt', lo que puede posibilitar la exposici\u00f3n de informaci\u00f3n."}], "id": "CVE-2025-10487", "lastModified": "2026-10-18T21:10:00.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10487", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-11-03T13:22:54.634298Z", "version": "2.0.3"}}]}, "published": "2025-11-01T07:15:33.610", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3381123%40advanced-ads&new=3381123%40advanced-ads&sfp_email=&sfph_mail="}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3efe6b81-72db-4419-92a3-26e22ebf46e8?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T13:58:55.478145+00:00", "value": {"mitigation_remediation": ["Apply the latest Advanced Ads plugin version (2.0.13 or later).", "Verify that the plugin\u2019s AJAX endpoints are not reachable by unauthenticated users by testing them from a non-logged\u2011in session.", "Restrict WordPress user roles so that only trusted administrators have permission to configure or use the plugin, and consider disabling the editor capability for lower\u2011privileged users."], "summary": {"action": "Immediate Patch", "impact": "Limited Remote Code Execution via unprotected AJAX endpoint"}, "threat_synthesis": {"affected_systems": "The vulnerability affects the Advanced Ads plugin for WordPress versions up to and including 2.0.12, used by websites that rely on monetizemore\u2019s Ad Manager & AdSense tooling.", "description_and_impact": "The Advanced Ads \u2013\u00a0Ad Manager & AdSense plugin contains a flaw that allows unauthenticated attackers to invoke arbitrary PHP functions whose names begin with \"get_the_\" through the select_one() AJAX handler. This results in limited code execution or information disclosure by exploiting the plugin\u2019s dynamic function call mechanism, which is a form of improper code generation. The flaw corresponds to CWE-94, Improper Control of Generation of Code.", "risk_and_exploitability": "The CVSS score of 7.3 indicates a high severity impact, while the EPSS score of less than 1% suggests a low current exploitation likelihood. The exploit requires no special privileges; an attacker can directly target the AJAX endpoint from any unprivileged network location. Since the plugin is widely used, administrators should treat the issue as critical even though it is not listed in the CISA KEV catalog."}}}}, "created": "2025-11-03T10:43:37.878543+00:00", "updated": "2026-04-22T14:00:18.237458+00:00", "vendors": ["monetizemore", "monetizemore$PRODUCT$advanced_ads", "wordpress", "wordpress$PRODUCT$wordpress"]}