CVE-2026-12242 | adegans AdRotate Banner Manager Plugin up to 5.17.7 on WordPress Shortcode adrotate banner code injection

June 24, 2026 Yanac

A vulnerability, which was classified as critical, has been found in adegans AdRotate Banner Manager Plugin up to 5.17.7 on WordPress. This affects the function adrotate of the component Shortcode Handler. Performing a manipulation of the argument banner results in code injection.

This vulnerability is reported as CVE-2026-12242. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More