CVE-2025-59554 - WordPress Advanced Ads – Tracking plugin < 3.0.7

Back Back to CVE browser

CRITICAL

WordPress Advanced Ads – Tracking plugin < 3.0.7 - SQL Injection vulnerability

Published Jun 17, 2026

9.3

CRITICAL

CVSS 3.1

EPSS 0.40%

Description

Unauthenticated SQL Injection in Advanced Ads – Tracking < 3.0.7 versions.

Affected products

Vendor Advanced Ads GmbH Product Advanced Ads – Tracking Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <3.0.7

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Advanced Ads GmbH

Advanced Ads – Tracking

unaffected

Version	Status	Constraints
-	affected	<3.0.7

Remediation

Vendor solution

Update the WordPress Advanced Ads – Tracking plugin to the latest available version (at least 3.0.7).

Weaknesses (1)

CWE-89

SQL Injection

References (1)

https://patchstack.com/database/wordpress/plugin/advanced-ads-tracking/vulnerability/wordpress-advanced-ads-tracking-plugin-3-0-7-sql-injection-vulnerability?_s_id=cve
vdb-entry

Link	Providers	Tags
https://patchstack.com/database/wordpress/plugin/advanced-ads-tracking/vulnerability/wordpress-advanced-ads-tracking-plugin-3-0-7-sql-injection-vulnerability?_s_id=cve		vdb-entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Patchstack

Published Jun 17, 2026

Updated Jun 17, 2026

Reserved Sep 17, 2025

Link CVE-2025-59554

CISA Vulnrichment

Updated Jun 17, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-59554

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-59554