CVE-2026-54816CWE-94

WordPress Advanced Ads plugin <= 2.0.21 - Remote Code Execution (RCE) vulnerability

High · published June 17, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
31.5
In the wild
Unconfirmed
What it is

Improper Control of Generation of Code ('Code Injection') vulnerability in Monetizemore Advanced Ads allows Remote Code Inclusion.

This issue affects Advanced Ads: from n/a through 2.0.21.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00386 · 31.5th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-06-17T13:37Z
EPSS history
Timeline
  • 17 JUN 13:37Z
    WordPress Advanced Ads plugin <= 2.0.21 - Remote Code Execution (RCE) vulnerability
    cvelistv5