Thanks for the heads up. I use open ads on a few of my sites but haven’t updated it in probably a year or so. I will look into this further.
Btw, did you check your log files and figure out how they got in? Also did you post on the open ads forum letting them know of the vulnerability or was this a known issue thats confirmed fixed in a newer version?