AdRotate Banner Manager vulnerabilities

2 known vulnerabilities in AdRotate Banner Manager from Adegans. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  AdRotate Banner Manager: Improper Control of Generation of Code

  CVE-2026-12242Jun 24, 2026Adegans

  The AdRotate Banner Manager plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 5.17.7 via the 'banner' attribute of the adrotate shortcode. This is due to insufficient input validation and sanitization of the banner

• 7.2 High severity

  AdRotate Banner Manager: Unrestricted Upload of File with Dangerous Type

  CVE-2022-1206Aug 20, 2024Adegans

  The AdRotate Banner Manager – The only ad manager you'll need plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension sanitization in the adrotate_insert_media() function in all versions up to, and including, 5.13.2. This mak