Known vulnerabilities in Broadstreet

Integrate Broadstreet adserving power into your site.

11Reported vulnerabilities

6.4Highest CVSS score

1.53.3Latest version

700+Active installs

What to do now

Update Broadstreet to 1.53.2 or later. 11 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 4, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2025-4652	Medium 6.1	0.5%	Before 1.51.8	`1.51.8`	June 9, 2025
CVE-2024-11825	Medium 6.4	0.3%	0 to 1.51.0 (inclusive)	`1.51.1`	January 25, 2025
CVE-2025-48113	Medium 6.4	0.2%	1.51.2 and earlier	`1.51.3`	May 16, 2025
CVE-2025-32211	Medium 6.4	0.2%	1.52.1 and earlier	`1.52.2`	April 7, 2025
CVE-2025-9987	Medium 5.3	0.3%	1.53.1 and earlier	`1.53.2`	May 12, 2026
CVE-2026-1881	Medium 4.3	0.2%	1.52.2 and earlier	`1.53.2`	May 20, 2026
CVE-2025-9988	Medium 4.3	0.2%	1.53.1 and earlier	`1.53.2`	May 12, 2026
CVE-2025-9989	Medium 4.4	0.2%	1.53.1 and earlier	`1.53.2`	May 12, 2026
CVE-2026-45210	Medium 4.3	0.2%	1.52.2 and earlier	`1.53.2`	February 21, 2026
CVE-2025-69311	Medium 4.3	0.2%	1.52.1 and earlier	`1.52.2`	January 19, 2026
CVE-2025-32270	Medium 4.3	0.2%	1.51.1 and earlier	`1.52.2`	April 4, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.