Skip to content
Sign in
Not rated

CVE-2022-0267 The AdRotate WordPress plugin before 5.8.22 does not sanitise and escape the adrotate_action before using it in a SQL…

Description

The AdRotate WordPress plugin before 5.8.22 does not sanitise and escape the adrotate_action before using it in a SQL statement via the adrotate_request_action function available to admins, leading to a SQL injection

Affected products and versions

Product Affected versions Fixed in
AdRotate – Ad manager & AdSense Ads 5.8 earliest → < 5.8.22 5.8.22

Other CVEs of AdRotate – Ad manager & AdSense Ads

The 3 CVEs of AdRotate – Ad manager & AdSense Ads →
CVE-2022-0662 The AdRotate WordPress plugin before 5.8.23 does not sanitise and escape Advert Names which could allow high privilege… Not rated CVE-2022-0649 The AdRotate WordPress plugin before 5.8.23 does not escape Group Names, which could allow high privilege users to… Not rated
Track this CVE