CVE-2026-54816— WordPress Advanced Ads plugin <= 2.0.21 - Remote Code Execution (RCE) vulnerability
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Monetizemore | Advanced Ads | n/a≤ 2.0.21 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-54816
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress Advanced Ads plugin <= 2.0.21 - Remote Code Execution (RCE) vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Improper Control of Generation of Code ('Code Injection') vulnerability in Monetizemore Advanced Ads allows Remote Code Inclusion. This issue affects Advanced Ads: from n/a through 2.0.21.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Monetizemore Advanced Ads 代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Advanced Ads是Monetizemore公司的一款高级广告管理插件。 Monetizemore Advanced Ads 2.0.21及之前版本存在代码注入漏洞，该漏洞源于代码生成控制不当，可能导致远程代码包含攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Monetizemore | Advanced Ads | n/a ~ 2.0.21 | - |
II. Public POCs for CVE-2026-54816
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-54816
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: Monetizemore
- CVE-2025-12884
Advanced Ads – Ad Manager & AdSense <= 2.0.14 - Missing Auth - CVE-2025-12984
Advanced Ads – Ad Manager & AdSense <= 2.0.15 - Authenticate - CVE-2025-13592
Advanced Ads <= 2.0.14 - Authenticated (Editor+) Remote Code - CVE-2025-10487
Advanced Ads <= 2.0.12 - Unauthenticated Limited Code Execut - CVE-2024-2290
Advanced Ads – Ad Manager & AdSense <= 1.52.1 - Authenticate
Same weakness: CWE-94
- CVE-2026-35211
OpenCTI: Elasticsearch Painless Script Injection via GraphQL - CVE-2026-59821
LiteLLM: Custom Code Guardrails production endpoints bypass - CVE-2026-55408
Koodo Reader: Remote code execution via malicious epub file - CVE-2026-53511
calibre: Arbitrary Code Execution in Template Formatter via - CVE-2026-53751
DataEase: H2 JDBC URL Filter Bypass Leads to Remote Code Exe
V. Comments for CVE-2026-54816
No comments yet