What is GHSA-8f3r-fqj2-gfj6?

GHSA-8f3r-fqj2-gfj6 is a security advisory published by GitHub Security Advisories with High severity. The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its...

Which CVE IDs does GHSA-8f3r-fqj2-gfj6 cover?

GHSA-8f3r-fqj2-gfj6 covers the following CVE IDs: CVE-2026-81655. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8f3r-fqj2-gfj6?

GHSA-8f3r-fqj2-gfj6 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-8f3r-fqj2-gfj6HighCVSS 7.5

The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its...

Vendor

GitHub Security Advisories

Published

September 27, 2026

Last Modified

September 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-81655 →

📋 Description

The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its settings pages, making it reachable by every logged in user under a configuration its own settings allow, and does not filter the content saved there, allowing users with a role as low as subscriber to store code which is then executed as PHP or served unescaped to site visitors.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-81655
https://wpscan.com/vulnerability/b189ce9a-a930-41e6-bdd1-fdcc3bfb66be
https://github.com/advisories/GHSA-8f3r-fqj2-gfj6