CVE-2026-115603
CVE-2026-115603 · WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Advanced Ads GmbH Advanced Ads – Tracking advanced-ads-tracking allows Blind SQL Injection.This issue affects Advanced Ads – Tracking: from n/a before 4.0.0.
CVSS 8.5 · High · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
advanced ads – tracking
- Versions
- ≥ 0, < 4.0.0: Affected; ≥ 4.0.0: Not affected (custom)
Update to 4.0.0