Advanced-woo-search

Advanced Woo Search

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2024-0251

  • EPSS 0.32%
  • Published 13.01.2024 08:15:06
  • Last modified 21.11.2024 08:46:09

The Advanced Woo Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search parameter in all versions up to, and including, 2.96 due to insufficient input sanitization and output escaping. This makes it possible for un...

4.4

CVE-2023-2452

  • EPSS 0.11%
  • Published 09.06.2023 06:16:07
  • Last modified 21.11.2024 07:58:38

The Advanced Woo Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.77 due to insufficient input sanitization and output escaping. This makes it possible for authenticated ...

7.5

CVE-2020-12070

  • EPSS 0.88%
  • Published 24.04.2020 23:15:11
  • Last modified 21.11.2024 04:59:12

The Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive information disclosure vulnerability in every ajax search request via the sql field to includes/class-aws-search.php.