Ad Inserter – Ad Manager & AdSense Ads

87 Quality Score

Active Installs

25/30

With 300,000 active installs, Ad Inserter sits comfortably in the mid-tier of WordPress ad plugins, well behind Site Kit's 5 million but matching the install count of focused alternatives like Header Footer.

Update Freshness

25/25

A last update on 2026-06-30 and a tested-with tag for WordPress 7.0 indicate the developer is actively maintaining the plugin against current core releases, which is exactly what you want for ad code that runs on every page view.

User Rating

15/15

A 98 out of 100 from 2,426 reviewers is exceptional and reflects a long track record of satisfied users, not just a handful of early adopters.

Support Health

8/15

Only 6 support threads exist in the dataset, which means support volume is low, likely because the plugin is mature and well documented, but the small sample size makes the 100 percent resolution rate less meaningful as a support quality signal.

WP Compatibility

15/15

Compatibility is excellent, requiring only PHP 7.4 and WordPress 5.0, and confirmed working on WordPress 7.0, which means it will run on the vast majority of hosting environments in use today.

Scores higher than 97% of indexed plugins

About

Manage Google AdSense ads, banners, ad rotation, sticky widgets, AMP ads, ads.txt, tracking, header and footer code, PHP code, global custom fields

Active Installs 300k+

Rating ★★★★½ 4.9/5

Last Updated 2026-09-23 6:41pm GMT

Requires WordPress 6.0+

Tested Up To 7.0.6

Requires PHP 7.4+

Security History

18 known vulnerabilities, all patched

5 High 13 Medium

Most recent: September 15, 2026

View details ▸

Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter Medium

September 15, 2026 Patched in ["2.8.17"] CVE-2026-11984

Ad Inserter <= 2.8.16 - Missing Authorization to Block Visibility Bypass via ai_ajax Medium

August 5, 2026 Patched in ["2.8.17"] CVE-2026-11983

Ad Inserter – Ad Manager & AdSense Ads <= 2.8.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting Medium

July 8, 2026 Patched in ["2.8.12"] CVE-2026-57693

Ad Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode Attribute Medium

July 2, 2026 Patched in ["2.8.17"] CVE-2026-11900

Ad Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe Mode Medium

June 5, 2026 Patched in ["2.8.16"] CVE-2026-9280

Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field Medium

November 4, 2025 Patched in ["2.8.8"] CVE-2025-11745

Ad Inserter - Ad Manager and AdSense Ads <= 2.8.0 - Reflected Cross-Site Scripting Medium

March 5, 2025 Patched in ["2.8.1"] CVE-2025-22623

Ad Inserter <= 2.7.37 - Reflected Cross-Site Scripting Medium

October 14, 2024 Patched in ["2.7.38"] CVE-2024-49248

Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax Medium

September 22, 2023 Patched in ["2.7.31"] CVE-2023-4645

Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe Medium

September 22, 2023 Patched in ["2.7.31"] CVE-2023-4668

Ad Inserter <= 2.7.25 - Authenticated (Admin+) PHP Object Injection High

April 19, 2023 Patched in ["2.7.26"] CVE-2023-1549

Ad Inserter Free and Pro <= 2.7.11 - Reflected Cross-Site Scripting Medium

April 7, 2022 Patched in ["2.7.12"] CVE-2022-0901

Ad Inserter < 2.7.11 - Authenticated (Admin+) Remote Code Execution High

February 3, 2022 Patched in ["2.7.11"]

Ad Inserter <= 2.7.9 - Reflected Cross-Site Scripting Medium

January 24, 2022 Patched in ["2.7.10"] CVE-2022-0288

Ad Inserter <= 2.4.21 - Authenticated Remote Code Execution High

July 15, 2019 Patched in ["2.4.22"] CVE-2019-15324

Ad Inserter <= 2.4.19 - Authenticated Path Traversal High

July 12, 2019 Patched in ["2.4.20"] CVE-2019-15323

Ad Inserter <= 1.5.5 - Cross-Site Request Forgery to Cross-Site Scripting Medium

August 13, 2015 Patched in ["1.5.6"]

Ad Inserter – Ad Manager & AdSense Ads < 1.5.3 - Cross-Site Request Forgery to Cross-Site Scripting High

May 2, 2015 Patched in ["1.5.3"] CVE-2015-9497

What It Does

Ad Inserter is a placement and rotation engine for ads on WordPress sites, with deep AdSense support including ads.txt management, sticky widgets, AMP ad slots, and header or footer code injection. It also lets you insert PHP snippets and global custom fields without editing your theme files, which broadens its role beyond pure ad serving. In practice, you define block positions, rotation rules, and device targeting from a single settings screen.

Who It's For

This plugin is a strong fit for publishers and bloggers running WordPress who need granular control over where, when, and how ads appear, especially AdSense publishers juggling multiple ad sizes and placements. It also suits site owners who want a single tool to inject tracking pixels, custom scripts, or PHP without installing several separate header and footer plugins. Smaller sites with a single banner placement will likely find it overkill.

Who Should Skip It

If you already use Site Kit by Google or a full ad management suite like Advanced Ads and are happy with it, installing Ad Inserter on top will create overlap and configuration confusion. Sites that do not monetize through ads and only need header and footer code injection should consider a lighter plugin such as Head, Footer and Post Injections instead.

The Bottom Line

Ad Inserter earns its 86.73 overall score through consistently strong ratings, active maintenance, and broad compatibility, making it one of the best all-in-one ad and code injection plugins in the WordPress ecosystem. The main caveat is its feature breadth: if you only need a few simple placements, the dense settings panel adds complexity you do not need. For publishers serious about ad rotation, AMP, and custom code injection in one tool, it is a safe and well-supported choice.

Pick Site Kit if you primarily want first-party Google data, AdSense integration, and Analytics in one official tool rather than Ad Inserter's broader placement engine.

Head, Footer and Post Injections 87/100

Choose Head, Footer and Post Injections if your only need is injecting header, footer, or post code snippets and you do not want any ad management features.

Advanced Ads - Ad Manager & AdSense 85/100

Pick Advanced Ads if you want a more guided, form-driven ad workflow with built-in ad sizes, selling ads, and tracking at the cost of less granular placement control.

Ads.txt Manager 84/100

Choose Ads.txt Manager if your sole need is compliant ads.txt editing and you prefer a single-purpose lightweight tool over a full ad management suite.

Schema & Structured Data for WP & AMP 83/100

Pick this schema plugin only if your main concern is structured data and AMP markup and you plan to pair it with a dedicated ad solution.