141 matches found
CVE-2026-82613
A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultList of the file /index.php?q=product of the component Product Search Interface. Performing a manipulation of the argument Search results in sql injection. The attack may be...
CVE-2026-82613 itsourcecode Online Medicine Delivery System Product Search index.php loadResultList sql injection
A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultList of the file /index.php?q=product of the component Product Search Interface. Performing a manipulation of the argument Search results in sql injection. The attack may be...
CVE-2026-82613
A SQL injection vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0 , specifically in the loadResultList function within the file /index.php?q=product (Product Search Interface). The flaw is triggered by manipulating the Search argument, allowing an unauthenticated re...
EUVD-2026-68341
A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultList of the file /index.php?q=product of the component Product Search Interface. Performing a manipulation of the argument Search results in sql injection. The attack may be...
CVE-2026-66607
Unauthenticated Cross Site Scripting XSS in Advance Product Search = 1.4.8 versions...
EUVD-2026-63294
Unauthenticated Cross Site Scripting XSS in Advance Product Search = 1.4.8 versions...
CVE-2026-66607 WordPress Advance Product Search plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Advance Product Search = 1.4.8 versions...
CVE-2026-66607
The WordPress Advance Product Search plugin (versions ≤ 1.4.8) has an unauthenticated XSS flaw with CVSS 7.1 (HIGH). Patchstack is the source; the Patchstack advisory link is provided in the references. No exploitation evidence is reported in the provided documents.
WordPress Advance Product Search plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by sequenceX0 in WordPress Plugin Advance Product Search versions = 1.4.8...
CVE-2026-12753
The Advance Product Search- Voice & Ajax Search for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 's' and 'match' parameter in all versions up to, and including, 1.4.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ...
EUVD-2026-44857
The Advance Product Search- Voice & Ajax Search for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 's' and 'match' parameter in all versions up to, and including, 1.4.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ...
CVE-2026-12753 Advance Product Search- Voice & Ajax Search for WooCommerce <= 1.4.4 - Unauthenticated SQL Injection via 's' and 'match' Parameter
The Advance Product Search- Voice & Ajax Search for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 's' and 'match' parameter in all versions up to, and including, 1.4.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ...
CVE-2026-56070
Unauthenticated SQL Injection in Advance Product Search = 1.4.4 versions...
CVE-2026-56070 WordPress Advance Product Search plugin <= 1.4.4 - SQL Injection vulnerability
Unauthenticated SQL Injection in Advance Product Search = 1.4.4 versions...
EUVD-2026-39723
Unauthenticated SQL Injection in Advance Product Search = 1.4.4 versions...
CVE-2026-56070
WordPress Advance Product Search plugin (
CVE-2026-42664
Unauthenticated Broken Access Control in AI Product Search for WooCommerce Motive Commerce Search = 1.38.2 versions...
CVE-2026-42664
CVE-2026-42664 affects the WordPress plugin AI Product Search for WooCommerce – Motive Commerce Search, version
EUVD-2026-36829
Unauthenticated Broken Access Control in AI Product Search for WooCommerce Motive Commerce Search = 1.38.2 versions...
CVE-2026-42664 WordPress AI Product Search for WooCommerce – Motive Commerce Search plugin <= 1.38.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in AI Product Search for WooCommerce Motive Commerce Search = 1.38.2 versions...