9.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
36.9%
The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation.
wordpress.org/plugins/wp-advanced-search/#developers
wpvulndb.com/vulnerabilities/10199