CVE-2021-24138

AdRotate < 5.8.4 - Authenticated SQL Injection PUBLISHED

Description (CNA)

Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id". This requires an admin privileged user.

Affected (CNA)

Vendor / product	Versions
Unknown / AdRotate	affected 5.8.4 before 5.8.4

CWE

CWE-89

References

https://wpscan.com/vulnerability/aafac655-3616-4b27-9d0f-1cbc2faf0151

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/aafac655-3616-4b27-9d0f-1cbc2faf0151