title: AdRotate < 5.8.4 - Authenticated SQL Injection
description: Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id". This requires an admin privileged user.
problem types: CWE-89 SQL Injection
affected:
{
product: AdRotate
vendor: Unknown
versions:
lessThan: 5.8.4, status: affected, version: 5.8.4, versionType: custom
}