Adning Advertising

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:tunafish:adning_advertising:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTunafish (3ab91871-2ffd-518a-a904-4528d9926a4a)
ProductAdning Advertising (d3dc5be6-a646-5200-9403-7d65f8f4ed6e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36728 vulnerable 2026-06-08 05:25:49.488238 Adning Advertising <= 1.5.5 - Unauthenticated Arbitrary File Deletion via Path Traversal
MEDIUM (6.5)
The Adning Advertising plugin for WordPress is vulnerable to file deletion via path traversal in versions up to, and including, 1.5.5. This allows unauthenticated attackers to delete arbitrary files which can be used to reset and gain full control of a site.
Published: 2023-06-07T12:43:13.708Z
Updated: 2026-04-08T17:30:21.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36705 vulnerable 2026-06-08 05:25:49.405342 Adning Advertising <= 1.5.5 - Arbitrary File Upload
CRITICAL (9.8)
The Adning Advertising plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the _ning_upload_image function in versions up to, and including, 1.5.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
Published: 2023-06-07T12:43:12.412Z
Updated: 2026-04-08T16:50:39.405Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.