Ad Widget for WordPress
Ad Widget for WordPress has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2024; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 9.9 out of 10. Severity breakdown: 1 critical and 0 high.
The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include PHP Remote File Inclusion.
1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.
2 independent researchers contributed these findings, one record each. Ad Widget for WordPress is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2024-33696WordPress Ad Widget <= 2.20.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Ad Widget for WordPress
Author
Broadstreet
This is the easiest way to place ads in your WordPress site. Just drag a widget to the sidebar, upload, an ad, and save. Watch a short video demo: https://youtu.be/E9CC3ZWOaLU Note: If you have an adblocker installed, it will prevent this widget (and parts of WordPress) from working properly. Extremely intuitive for beginners No clunky ad management interface Easily place image banner ads Easily place Google ad tags and other ad code If you like Ad Widget and you’re selling ads, you might like our new ad formats for publishers and salespeople. You will not find an easier way to run ads on your website! Demo Watch a short video demo: https://youtu.be/E9CC3ZWOaLU Troubleshooting The Ad Widget is a very simple plugin. If you are having trouble loading ads on your site, please make sure that: You do not have an ad blocker installed (you would be amazed how often this happens). Disable it and refresh the page a few times to see if the ad appears. You don’t have CSS in your theme which is hiding images (rare, but it happens) If you have any other trouble, email kenny@broadstreetads.com – try to avoid the WordPress support forums because they’re awful.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C