SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-89050

MEDIUM · CVSS 4.3 EPSS 0.10%

Source: NVD + CISA KEV + EPSS · Published 2026-09-13 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The Quads Ads Manager for Google AdSense WordPress plugin prior to version 3.0.5 is vulnerable as it fails to verify payment completion with the configured payment gateway, enabling users to falsely mark ad-selling orders as paid. This could lead to unauthorized ad placements, potentially resulting in financial loss and reputational damage for website owners. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.

CVE
CVE-2026-89050
Severity
MEDIUM
CVSS
4.3
EPSS
0.10%
WordPress

Original NVD Description

The Quads Ads Manager for Google AdSense WordPress plugin before 3.0.5 does not verify payment completion with the configured payment gateway before marking an ad-selling order as paid, allowing users who can place an order to obtain a paid ad placement without payment.