$ 0 0 WordPress AdRotate plugin versions 3.6.6 and below suffer from a remote SQL injection vulnerability.