Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id". This requires an admin privileged user.CreditsNguyen Anh Tien - SunCSR (Sun* Cyber Security Research)Referenceshttps://wpscan.com/vulnerability/aafac655-3616-4b27-9d0f-1cbc2faf0151