Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:adrotate_–_ad_manager_&_adsense_ads:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductAdrotate – Ad Manager & Adsense Ads (718a4455-d5f0-5cfb-a115-d34a081d39d8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0662 vulnerable 2026-06-08 05:39:10.481394 Adrotate < 5.8.23 - Admin+ XSS via Advert Name
The AdRotate WordPress plugin before 5.8.23 does not sanitise and escape Advert Names which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Published: 2022-05-02T16:05:40.000Z
Updated: 2024-08-02T23:32:46.556Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0649 vulnerable 2026-06-08 05:39:10.458040 Adrotate < 5.8.23 - Admin+ XSS via Group Name
The AdRotate WordPress plugin before 5.8.23 does not escape Group Names, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Published: 2022-05-02T16:05:39.000Z
Updated: 2024-08-02T23:32:46.545Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0267 vulnerable 2026-06-08 05:39:09.637749 AdRotate < 5.8.22 - Admin+ SQL Injection
The AdRotate WordPress plugin before 5.8.22 does not sanitise and escape the adrotate_action before using it in a SQL statement via the adrotate_request_action function available to admins, leading to a SQL injection
Published: 2022-03-07T08:16:24.000Z
Updated: 2024-08-02T23:25:38.787Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.