Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in AdRotate Banner Manager – AdSense Ads & more 3.9.4

  • Severity: critical
  • Status: Fixed
  • Publication: February 22, 2014

The Ad manager & AdSense Ads for WordPress has a security vulnerability which makes it possible for unauthenticated attackers to access sensitive information from the database. This vulnerability affects versions 3.9 to 3.9.4 (free version) and 3.9 to 3.9.5 (premium version). It is caused by an insufficient escaping of the user supplied parameter and lack of preparation for the existing SQL query

Detected in:

AdRotate Banner Manager – AdSense Ads & more fixed vulnerable versions: >= 3.9 <= 3.9.4
AdRotate Banner Manager – The only ad manager you'll need fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.