CVE-2026-89427Published
Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-89427 · Microsoft / collected KEV context
cve-program · CVE-2026-89427
- https://www.wordfence.com/threat-intel/vulnerabilities/id/c01f98a4-c349-4cb2-b09a-5cbadfcad830?source=cve
- https://plugins.trac.wordpress.org/browser/ad-inserter/tags/2.8.18/ad-inserter.php#L13081
- https://plugins.trac.wordpress.org/browser/ad-inserter/tags/2.8.18/ad-inserter.php#L13012
- https://plugins.trac.wordpress.org/browser/ad-inserter/tags/2.8.18/ad-inserter.php#L12903
- https://plugins.trac.wordpress.org/changeset?reponame=&new=3709970%40ad-inserter%2Ftags%2F2.8.19&old=3624916%40ad-inserter%2Ftags%2F2.8.18
- https://plugins.trac.wordpress.org/changeset/3709957/ad-inserter/trunk/ad-inserter.php
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.