EUVD-2022-15743

Malicious code in bioql PyPI...

EUVD-2022-15448

Malicious code in bioql PyPI...

CVE-2022-0267: Improper Neutralization of Special Elements used in an SQL Command

The AdRotate WordPress plugin before 5.8.22 does not sanitise and escape the adrotateaction before using it in a SQL statement via the adrotaterequestaction function available to admins, leading to a SQL injection...

CVE-2021-24138: Improper Neutralization of Special Elements used in an SQL Command

Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id". This requires an admin privileged user...