Spacetime vulnerabilities
15 published CVEs name Spacetime among the affected products.
- 15Published CVEs15 of them scored
- 11Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-105077
WordPress Ad Inserter plugin <= 2.8.19 - Cross Site Scripting (XSS) vulnerability
Spacetime · Ad Inserter
High7.1 - CVE-2026-102905
Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter
spacetime · Ad Inserter – Ad Manager & AdSense Ads
Medium6.5 - CVE-2026-89097
Ad Inserter <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters
spacetime · Ad Inserter – Ad Manager & AdSense Ads
Medium4.3 - CVE-2026-89427
Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter
spacetime · Ad Inserter – Ad Manager & AdSense Ads
Medium6.1 - CVE-2026-19902
Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header)
spacetime · Ad Inserter – Ad Manager & AdSense Ads
Medium6.1 - CVE-2026-97077
WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability
Spacetime · Ad Inserter
High7.1 - CVE-2026-11984
Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter
spacetime · Ad Inserter – Ad Manager & AdSense Ads
Medium5.3 - CVE-2026-11983
Ad Inserter <= 2.8.16 - Missing Authorization to Block Visibility Bypass via ai_ajax
spacetime · Ad Inserter – Ad Manager & AdSense Ads
Medium5.3 - CVE-2026-57693
WordPress Ad Inserter plugin <= 2.8.11 - Cross Site Scripting (XSS) vulnerability
Spacetime · Ad Inserter
Medium6.5 - CVE-2026-11900
Ad Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode Attribute
spacetime · Ad Inserter – Ad Manager & AdSense Ads
Medium4.3