Approved changes feed: RSS · Atom

cpe:2.3:a:adrotate_project:adrotate:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorAdrotate Project (f362d965-353f-524a-8162-1215501cfd70)
ProductAdrotate (81bd6bb4-1b42-5cb4-b3d3-2e4d7fa60943)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0267 vulnerable 2026-06-08 05:39:09.638463 AdRotate < 5.8.22 - Admin+ SQL Injection
The AdRotate WordPress plugin before 5.8.22 does not sanitise and escape the adrotate_action before using it in a SQL statement via the adrotate_request_action function available to admins, leading to a SQL injection
Published: 2022-03-07T08:16:24.000Z
Updated: 2024-08-02T23:25:38.787Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.