AdRotate Banner Manager

80 Quality Score

Active Installs

19/30

With 20,000 active installs and strong install-to-rating density, AdRotate is a niche leader but clearly outpaced by Ad Inserter, Advanced Ads, and especially Site Kit.

Update Freshness

25/25

A perfect maintenance score reflects that the plugin was updated days before this assessment and explicitly supports WordPress 7.0, which is unusually forward-looking.

User Rating

13/15

A rating of 86 from 653 users is solid and well above average, indicating general satisfaction despite the smaller sample size.

Support Health

8/15

Support health is the weak link: only 5 public threads on record with 60% resolved is a small dataset, so response performance is hard to verify.

WP Compatibility

15/15

Compatibility is fully maxed out, requiring PHP 8.0 and WordPress 4.9 minimum, which aligns with current WordPress environment recommendations.

Scores higher than 77% of indexed plugins

About

Easily manage, and schedule ads on your WordPress site with AdRotate. Support for Google AdSense, Amazon, and custom banners. Start monetizing today!

Active Installs 20k+

Rating ★★★★ 4.3/5

Last Updated 2026-08-25 2:48am GMT

Requires WordPress 4.9+

Tested Up To 7.1

Requires PHP 8.0+

Security History

10 known vulnerabilities, all patched

2 Critical 6 High 2 Medium

Most recent: June 23, 2026

View details ▸

AdRotate Banner Manager <= 5.17.7 - Authenticated (Contributor+) PHP Code Injection via 'banner' Shortcode Attribute High

June 23, 2026 Patched in ["5.17.8"] CVE-2026-12242

AdRotate – Ad manager & AdSense Ads <= 5.13.2 - Authenticated (Admin+) Double Extension Arbitrary File Upload High

August 19, 2024 Patched in ["5.13.3"] CVE-2022-1206

AdRotate Banner Manager <= 5.9 - Cross-Site Request Forgery High

November 11, 2022 Patched in ["5.9.1"] CVE-2022-26366

AdRotate – Ad manager & AdSense Ads <= 5.8.22 - Authenticated Stored Cross-Site Scripting via Group Names Medium

April 11, 2022 Patched in ["5.8.23"] CVE-2022-0649

AdRotate – Ad manager & AdSense Ads <= 5.8.22 - Authenticated Stored Cross-Site Scripting via Advert Names Medium

April 11, 2022 Patched in ["5.8.23"] CVE-2022-0662

AdRotate – Ad manager & AdSense Ads <= 5.8.17 - Admin+ SQL Injection High

February 7, 2022 Patched in ["5.8.22"] CVE-2022-0267

AdRotate < 5.8.4 - Authenticated SQL Injection High

June 3, 2020 Patched in ["5.8.4"] CVE-2021-24138

AdRotate – Ad manager & AdSense Ads <= 5.2 - Authenticated SQL Injection High

July 11, 2019 Patched in ["5.3"] CVE-2019-13570

AdRotate – Ad manager & AdSense Ads 3.9 - 3.9.4 - SQL Injection Critical

February 22, 2014 Patched in ["3.9.5"] CVE-2014-1854

AdRotate – Ad manager & AdSense Ads < 3.6.8 - SQL Injection Critical

November 8, 2011 Patched in ["3.6.8"] CVE-2011-4671

What It Does

AdRotate Banner Manager lets WordPress site owners create, schedule, and rotate ad campaigns across banner placements, including support for Google AdSense, Amazon Associates, and custom HTML/image ads. It provides a centralized dashboard for managing ads by date, click limits, or impressions, and inserts them via shortcodes, widgets, or blocks.

Who It's For

This plugin is best suited for bloggers, niche publishers, and small business owners who want fine-grained manual control over individual ad placements without a full ad server. It fits sites that juggle multiple advertisers or affiliate links and need scheduling on a per-ad basis.

Who Should Skip It

If you only run Google AdSense and want first-party analytics built in, Site Kit by Google is a stronger choice. If you need a sophisticated header bidding setup or programmatic ad ops, look at a dedicated platform rather than a WordPress plugin.

The Bottom Line

AdRotate is a lean, well-maintained ad manager that earns an overall quality score of 79.66/100, making it a strong pick for publishers who want manual control over ad lifecycles. Its only real gap is limited visibility into support responsiveness. If you run a larger ad operation or rely on AdSense alone, the alternatives above offer broader feature sets.

Related Plugins

Site Kit by Google 94/100

Pick this instead if you primarily monetize via AdSense and want official Google tools for Search Console, Analytics, and speed insights in one suite.

Head, Footer and Post Injections 87/100

Choose this lighter alternative if you only need to inject script-based ad codes (such as header bidding or sticky ads) and do not need scheduled ad lifecycles.

Ad Inserter 87/100

Choose Ad Inserter if you want automatic in-content ad placement by paragraph, device, or user role rather than manually slotting each banner.

Advanced Ads 85/100

Pick Advanced Ads if you need richer features like ad trafficking layers, ad groups, or integration with selling ad space directly.

CookieAdmin 85/100

Choose this instead if your concern is compliance for users (consent banners) rather than rotating the ads themselves.