Approved changes feed: RSS · Atom

cpe:2.3:a:datafeedrcom:ads_by_datafeedr.com:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDatafeedrcom (e51adbd3-5350-5432-866c-921c82ecdeb0)
ProductAds By Datafeedr.Com (b1a693f5-f637-5ddd-a41c-0d7724ab3f42)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5843 vulnerable 2026-06-08 06:19:44.885862 Ads by datafeedr.com <= 1.1.3 - Unauthenticated (Limited) Remote Code Execution
CRITICAL (9)
The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.1.3 via the 'dfads_ajax_load_ads' function. This allows unauthenticated attackers to execute code on the server. The parameters of the callable function are limited, they cannot be specified arbitrarily.
Published: 2023-10-30T13:48:58.150Z
Updated: 2026-04-08T16:53:14.444Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.