medium5.5
CVE-2021-24138
Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id".
Impact
Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id". This requires an admin privileged user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ajdg | Adrotate | before 5.8.4 |