CVE-2026-42744

MediumCVSS 6.5

Published: 27/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

The Ads by WPQuads plugin contains an Improper Validation of Specified Quantity in Input vulnerability that allows manipulating hidden fields. The issue affects versions up to and including 3.0.2.

Risk Assessment

An attacker may modify hidden form fields, potentially leading to unexpected configuration or data changes on the site.

Recommendation

Update the Ads by WPQuads plugin to a version later than 3.0.2 and enforce server-side input validation.

Other vulnerabilities in Ads by WPQuads

CVE-2026-57335Medium
The Ads by WPQuads plugin version 3.0.3 and earlier contains a broken access control vulnerability exploitable by subscribers. This allows a subscriber-level user to gain unauthorized access to advertising features.

Original NVD description (English source)

Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded allows Manipulating Hidden Fields.This issue affects Ads by WPQuads: from n/a through <= 3.0.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS