S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
medium·Product Based Web Vulnerabilities·Updated Jan 14, 2024

CVE-2017-18487 Scanner

Detects 'Cross-Site Scripting (XSS)' vulnerability in Google AdSense plugin for WordPress affects v. before 1.44.

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsdomain, ipv4, subdomain
CostFree
3.1k
Times Used
continuous scan runs
4.1k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2017-18487
6.1
CVSS

The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues.

Attack Vector
-
Privileges Req.
-
User Interaction
-
Affected
n/aby n/a
n/a
Updated Aug 22, 2026View on NVD →
Detail

The Google AdSense plugin for WordPress is a popular tool used by website owners for displaying contextual advertisements on their sites. With its integration into WordPress, AdSense allows website owners to display relevant ads to their visitors. AdSense is mostly used by website owners as a way to generate revenue from their online content. It works by displaying ads that are specifically targeted to the audience visiting the website.

Recently, it was discovered that AdSense has multiple vulnerabilities. One of the most critical among them is the CVE-2017-18487. This vulnerability allows attackers to inject arbitrary code into the website that is using the plugin, making it easy for them to deploy a cross-site scripting (XSS) attack. An attacker only needs to exploit this vulnerability to gain access to sensitive information such as cookies that they can use to hijack user sessions.

If this vulnerability is exploited, it can lead to attackers injecting harmful code into the website, redirecting visitors to malicious sites, or even stealing user credentials. The main aim of an attacker would be to compromise the overall security of the website or to gain unauthorized access to sensitive information such as user data or financial information.

In conclusion, it is essential to protect your digital assets from any vulnerabilities that might arise, as attackers are always looking for ways to gain unauthorized access to sensitive information. s4e.io offers comprehensive insights on vulnerabilities in all your digital assets, thereby making it easier for you to identify and protect yourself from potential security threats. By subscribing to their pro features, you will find it much easier and quicker to learn about vulnerabilities in your digital assets.

 

REFERENCES

Solution Advice

To mitigate the effects of this vulnerability, website owners can take the following precautions:

  • Update the plugin to the latest version to patch the vulnerability.
  • Restrict access to the website's admin panel to trusted users.
  • Use a website firewall that can filter out malicious traffic.
  • Regularly scan the website for vulnerabilities.
  • Disable JavaScript on the back-end of the website.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

CVE-2017-18487 scanner - Cross-Site Scripting (XSS) vulnerability in Google AdSense plugin for WordPress | S4E