CVE-2026-42732 MEDIUM

CVE-2026-42732: WordPress Ads by WPQuads plugin <= 3.0.2 - Broken Authentication vulnerability

Vendor Ads By Wpquads
Product Ads by WPQuads
Weakness CWE-1284
Published May 27, 2026
Last update May 27, 2026

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

What the vulnerability does

01Description

Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded allows Input Data Manipulation.This issue affects Ads by WPQuads: from n/a through <= 3.0.2.

Explanation of Vulnerability in Simple Terms

02Summary

Ads by WPQuads versions 3.0.2 and earlier contain a vulnerability allowing attackers to modify data or disrupt service availability. The vulnerability requires no authentication and can be exploited over the network without user interaction. Site administrators should update to a version newer than 3.0.2 to mitigate the risk.

What an attacker can do

03Attacker Capabilities

Modify site data or cause temporary service disruption without authentication.

Potential impact on your site

04Site Impact

Attackers can alter ad settings, content, or cause the plugin to become unavailable.

Conditions required to exploit

05Prerequisites

Network access only; no authentication or user interaction required.

Key dates

06Disclosure timeline

May 27, 2026 CVE published
May 27, 2026 Record updated

Related vulnerabilities

08Related CVE