CVE-2015-2825: Simple Ads Manager Project Simple Ads Manager

High severity, CVSS 7.5. EPSS: 14.4% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the path parameter.

Affected products

• Simple Ads Manager Project Simple Ads Manager: up to and including 2.5.94

Published 2015-04-21. Last modified 2026-06-17.