CyberSecBulletin

Adegans vulnerabilities

We track 2 vulnerabilities in Adegans products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 24, 2026.

2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score

Latest Adegans vulnerabilities

  • 8.8 High severity

    AdRotate Banner Manager: Improper Control of Generation of Code

    CVE-2026-12242Adegans

    The AdRotate Banner Manager plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 5.17.7 via the 'banner' attribute of the adrotate shortcode. This is due to insufficient input validation and sanitization of the banner

  • 7.2 High severity

    AdRotate Banner Manager: Unrestricted Upload of File with Dangerous Type

    CVE-2022-1206Adegans

    The AdRotate Banner Manager – The only ad manager you'll need plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension sanitization in the adrotate_insert_media() function in all versions up to, and including, 5.13.2. This mak