Description
Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id". This requires an admin privileged user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | AdRotate | 5.8.4 – < 5.8.4 | 5.8.4 |