← Back

Adrotateplugin

adrotateplugin

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Adrotate
adrotate
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-1854
1Adrotateplugin
1Adrotate
Apr 29, 2026
Feb 27, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free plugin 3.9 through 3.9.4 for WordPress allows remote attackers to execute arbitrary SQL commands via...Show more
SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free plugin 3.9 through 3.9.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter.Show less
CVE-2011-4671
1Adrotateplugin
1Adrotate
Apr 29, 2026
Dec 2, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter (aka...Show more
SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter (aka redirect URL).Show less