CVE-2021-24138

CVE-2021-24138 describes an authenticated SQL injection vulnerability in the AdRotate WordPress plugin, affecting versions prior to 5.8.4. This flaw allows an attacker with administrator privileges to inject malicious SQL queries through the "id" parameter. Rated 5.5 MEDIUM on the CVSS scale, it carries a high impact on confidentiality and low impact on availability, requiring high privileges but no user interaction for exploitation. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.