The Moneytizer

The Moneytizer has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; 4 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 2 high. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include Improper Access Control, Missing Authorization.

4 of the records (80%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

4 independent researchers contributed these findings, most of them (2) reported by Francesco Carlucci. The Moneytizer is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

6.9/ 10

Patch Coverage80%

Open

Fixed

Get automatic notifications for all The Moneytizer vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2026-39685

The Moneytizer <= 10.0.10 - Missing Authorization

Read the full analysis

Vulnerability Records

5 records


2026-02-22 00:00	The Moneytizer <= 10.0.10 - Missing Authorization The Moneytizer <= 10.0.10	`CVE-2026-39685`	5.3 Medium	Nguyen Ba Khanh	No
2025-12-31 00:00	The Moneytizer <= 10.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting The Moneytizer <= 10.0.9	`CVE-2025-62756`	6.4 Medium	Muhammad Yudha - DJ	Yes
2024-06-05 00:00	The Moneytizer <= 9.6.3 - Cross-Site Request Forgery via multiple AJAX actions The Moneytizer <= 9.6.3	`CVE-2023-6968`	8.1 High	Francesco Carlucci	Yes
2024-06-05 00:00	The Moneytizer <= 9.6.3 - Missing Authorization via multiple AJAX actions The Moneytizer <= 9.6.3	`CVE-2023-6966`	8.1 High	Francesco Carlucci	Yes
2024-03-15 00:00	The Moneytizer <= 9.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting The Moneytizer <= 9.5.20	`CVE-2024-27990`	6.4 Medium	LVT-tholv2k	Yes

Showing 1–5 of 5 reports

Plugin Profile

Latestv10.0.10

The Moneytizer

Author

lvaudore

3.8(42)

76/100

Last Updated

2026-03-09 (6mo ago)

Active Installs

1,000+

Downloads

120,595

Requires WP

3.3+

Requires PHP

7.0+

Tested up to

WP 6.9.7

Created

2016-02-18 (11y ago)

The Moneytizer is an advertising platform which enables you to monetize your website very easily. Manage your ad units and start displaying the great campaigns. Plus, you can follow your daily statistics on our dashboard.

View on WordPress.org