Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Quads Ads Manager for Google AdSense plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.98.1 due to insufficient input sanitization and output escaping of multiple ad metadata parameters. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-28 | 2 | Disclosure2 |
| 2026-03-29 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-2595 📊 Severity: 5.4 🚨 Risk Level: Medium 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-2595 #CVE-2026-2595 #CVE #Medium #Wordpress #CyberSecurity #InfoSec https://t.co/fZgSWpQHca
Post summary
Announcement of CVE‑2026‑2595, a medium‑severity vulnerability affecting WordPress, with no further technical, exploit, or mitigation details provided.
CVE-2026-2595 The Quads Ads Manager for Google AdSense plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.98.1 due to insufficien… https://www.cve.org/CVERecord?id=CVE-2026-2595
Post summary
CVE-2026-2595 exposes a stored XSS flaw in the Quads Ads Manager for Google AdSense WordPress plugin (v2.0.98.1 and earlier), as noted in the CVE record.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-2595 - Quads Ads Manager for Google AdSense <= 2.0.98.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Ad Metadata Parameters Intel Report: https://ift.tt/X4C92xw
Post summary
A new CVE (CVE-2026-2595) is disclosed, describing an authenticated Contributor+ stored XSS in Quads Ads Manager, with no PoC, exploitation, or patch information provided.