Approved changes feed: RSS · Atom

cpe:2.3:a:dwbooster:corner_ad:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorDwbooster (68f45f7b-4028-5f7d-8f51-d831b376be86)
ProductCorner Ad (911894f6-aad4-5afa-80d7-2c773831789d)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3427 vulnerable 2026-06-08 05:48:20.921003 Corner Ad <= 1.0.56 - Cross-Site Request Forgery
HIGH (8.8)
The Corner Ad plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.56. This is due to missing or incorrect nonce validation on its corner_ad_settings_page function. This makes it possible for unauthenticated attackers to trigger the deletion of ads via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Published: 2022-12-15T04:02:40.319Z
Updated: 2026-04-08T16:34:40.558Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-18579 vulnerable 2026-06-08 05:09:11.275875 Details available
The corner-ad plugin before 1.0.8 for WordPress has XSS.
Published: 2019-08-22T19:42:32.000Z
Updated: 2024-08-05T21:28:55.460Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.