Not rated
CVE-2021-24138 Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via…
Description
Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id". This requires an admin privileged user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AdRotate 5.8 | earliest → < 5.8.4 | 5.8.4 |