CVE-2021-24138

5.5 mediumEPSS 1.2%

Medium (5.5) in ajdg adrotate. EPSS 1.2% chance of exploitation in the next 30 days.

Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id". This requires an admin privileged user.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2021-03-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ajdg:adrotate

References

https://wpscan.com/vulnerability/aafac655-3616-4b27-9d0f-1cbc2faf0151
https://wpscan.com/vulnerability/aafac655-3616-4b27-9d0f-1cbc2faf0151

Check your stack JSON