Ads Pro Plugin Security: Insecure Access Control

Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

5.4

Ads Pro Plugin Security: Insecure Access Control

CVE-2026-25388

Summary

The Ads Pro plugin for WordPress is missing proper security checks, allowing an attacker to access unauthorized areas of a website. This can lead to data theft, modification, or other malicious activities. Users should update the Ads Pro plugin to the latest version or consider replacing it with a more secure alternative.

Original title

Missing Authorization vulnerability in scripteo Ads Pro ap-plugin-scripteo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ads Pro: from n/a through <= 5.0.

Original description

Missing Authorization vulnerability in scripteo Ads Pro ap-plugin-scripteo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ads Pro: from n/a through <= 5.0.

nvd CVSS3.1 5.4

Vulnerability type

CWE-862 Missing Authorization

https://patchstack.com/database/Wordpress/Plugin/ap-plugin-scripteo/vulnerabilit...

Published: 19 Feb 2026 · Updated: 11 Mar 2026 · First seen: 6 Mar 2026