Vulnerabilities (CVE)

Filtered by vendor Adrotate Project Subscribe
Filtered by product Adrotate
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-0267 1 Adrotate Project 1 Adrotate 2024-11-21 6.5 MEDIUM 7.2 HIGH
The AdRotate WordPress plugin before 5.8.22 does not sanitise and escape the adrotate_action before using it in a SQL statement via the adrotate_request_action function available to admins, leading to a SQL injection