How many WPFactory Adverts CVEs are in CISA KEV?

None of WPFactory Adverts's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of WPFactory Adverts are affected?

2 distinct WPFactory Adverts versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in WPFactory Adverts CVEs?

WPFactory Adverts's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization).

What is the average severity of WPFactory Adverts CVEs?

The average CVSS base score across WPFactory Adverts's scored CVEs is 5.9.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

WPFactory

2 CVEs

WPFactory Adverts Vulnerabilities

Name: WPFactory Adverts vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Adverts by WPFactory.

2

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

5.9

Avg CVSS

2025–2025

Last updated September 22, 2025

Overview

WPFactory Adverts has 2 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 5.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting WPFactory Adverts, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of WPFactory Adverts's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of WPFactory Adverts's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No WPFactory Adverts CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every WPFactory Adverts version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 1.42 CVEs

Fixed in

> 1.42 CVEs

Find a version

2 CVEs

Sort

WordPress Adverts Plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-57911
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.3% (17th pct)2025-09-22
WordPress WordPress Adverts Plugin plugin <= 1.4 - Broken Access Control vulnerability
CVE-2025-31848
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.4% (35th pct)2025-04-01

Common weakness types

The CWE weakness categories most often found in WPFactory Adverts CVEs. Follow any weakness for its full explanation.

Other WPFactory products

Browse vulnerabilities for other products by WPFactory.

EAN for WooCommerce6 CVEs Wishlist for WooCommerce6 CVEs customer email verification for woocommerce4 CVEs Products, Order & Customers Export for WooCommerce4 CVEs Advanced WooCommerce Product Sales Reporting3 CVEs Cost of Goods for WooCommerce3 CVEs eu/uk vat manager for woocommerce3 CVEs Additional Custom Product Tabs for WooCommerce2 CVEs

All WPFactory vulnerabilities

Frequently asked questions

Common questions about WPFactory Adverts vulnerabilities.

How many CVEs does WPFactory Adverts have?: WPFactory Adverts has 2 published CVE records since 2025.
How many WPFactory Adverts CVEs are in CISA KEV?: None of WPFactory Adverts's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for WPFactory Adverts vulnerabilities?: No WPFactory Adverts CVEs currently have a tracked public exploit in this dataset.
Which versions of WPFactory Adverts are affected?: 2 distinct WPFactory Adverts versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in WPFactory Adverts CVEs?: WPFactory Adverts's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization).
What is the average severity of WPFactory Adverts CVEs?: The average CVSS base score across WPFactory Adverts's scored CVEs is 5.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track WPFactory Adverts vulnerabilities

Monitor new WPFactory Adverts vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing