Output validation vulnerability in Simple Ads Manager 2.10.0.130

The Simple Ads Manager plugin for WordPress is vulnerable to an attack which could allow malicious users to gain access to a website running the plugin. In versions up to, and including, 2.9.8.125, attackers could use a technique called ‘unserialize’ to inject a type of code known as a ‘PHP Object’. This could potentially allow them to delete files, access sensitive data, or even execute code on the website. Even if the website does not have additional plugins or themes installed, this attack could still be successful.