WordPress Plugin Vulnerabilities

AdRotate < 3.6.8 - SQL Injection

Description

The AdRotate – Ad manager & AdSense Ads WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
adrotate
Fixed in 3.6.8

References

CVE
CVE-2011-4671
Exploitdb
18114

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
c2b5be71-2a43-41a4-91f8-1f4eac3d9626

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2021-07-23
Title
Comment Highlighter <= 0.13 - Authenticated SQL Injection
Published
2020-09-06
Title
Advanced Database Cleaner < 3.0.2 - Authenticated SQL injection
Published
2020-06-12
Title
wpDiscuz < 5.3.6 - Unauthenticated SQL Injection
Published
2024-06-04
Title
LifterLMS – WordPress LMS Plugin for eLearning < 7.6.3 - Authenticated (Contributor+) SQL Injection via Shortcode
Published
2025-10-27
Title
HUSKY < 1.3.7.2 - Unauthenticated SQL Injection via `phrase` Parameter