Access violation vulnerability in Ad Inserter Pro 2.7.15

The Ad Inserter Pro plugin for WordPress is potentially vulnerable to a security issue which allows malicious actors to make changes to files on WordPress websites without authorization. Reports show that the attackers have been deleting wp-config.php files, resetting the website in the process. The Wordfence Threat Intelligence team conducted a thorough investigation of the plugin but could not identify the component that is vulnerable. This leads to the conclusion that a misconfiguration or other issue on the plugin developer’s side may have enabled the file modification.