Ajdg Adrotate — known CVE vulnerabilities

Every CVE whose affected-product data names Ajdg Adrotate, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2019-13570 — CVSS 7.2 (high): The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection.
• CVE-2021-24138 — CVSS 5.5 (medium): Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id". This…
• CVE-2022-0649 — CVSS 4.8 (medium): The AdRotate WordPress plugin before 5.8.23 does not escape Group Names, which could allow high privilege users to perform Cross-Site…
• CVE-2022-0662 — CVSS 4.8 (medium): The AdRotate WordPress plugin before 5.8.23 does not sanitise and escape Advert Names which could allow high privilege users to perform…