Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

scripteo — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting scripteo. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Scripteo is a web application platform primarily used for creating and managing custom scripts and automation workflows. Historically, the platform has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, contributing to its 11 recorded CVEs. Security researchers have identified input validation weaknesses and improper access controls as recurring problems. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities suggests potential risks for organizations relying on Scripteo for critical operations. Users are advised to maintain strict access controls and apply security patches promptly to mitigate potential exploitation.

CVE ID Title CVSS Severity Published
CVE-2026-25388 WordPress Ads Pro plugin <= 5.0 - Broken Access Control vulnerability — Ads Pro CWE-862 5.4 Medium 2026-02-19
CVE-2025-7402 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_id — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager CWE-89 7.5 High 2025-11-24
CVE-2025-5339 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id' — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager CWE-89 7.5 High 2025-07-02
CVE-2025-6437 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oid — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager CWE-89 7.5 High 2025-07-02
CVE-2025-4380 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager CWE-98 8.1 High 2025-07-02
CVE-2025-6459 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Cross-Site Request Forgery to PHP Code Injection in bsaCreateAdTemplate — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager CWE-352 8.8 High 2025-07-02
CVE-2025-4381 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager CWE-89 7.5 High 2025-07-02
CVE-2025-4689 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Execution — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager CWE-98 9.8 Critical 2025-07-02
CVE-2025-46444 WordPress Ads Pro plugin <= 4.89 - Local File Inclusion vulnerability — Ads Pro CWE-98 8.1 High 2025-05-23
CVE-2025-46464 WordPress Ads Pro plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability — Ads Pro CWE-79 6.5 Medium 2025-05-16
CVE-2024-13322 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injection — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager CWE-89 7.5 High 2025-05-02

This page lists every published CVE security advisory associated with scripteo. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.