CVE-2021-24138: Ajdg Adrotate

Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id". This requires an admin privileged user.

Affected products

• Ajdg Adrotate: before 5.8.4 (fixed in 5.8.4)

Published 2021-03-18. Last modified 2026-06-17.