CVE-2020-12104

The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation...

CVE-2020-12104

The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation...

CVE-2020-12104

CVE-2020-12104 affects the WordPress wp-advanced-search plugin (v3.3.6). The Import feature accepts uploaded .sql files and is vulnerable to authenticated SQL injection, enabling execution of arbitrary SQL commands without validation. Root cause and impact are as described in the connected Red Ha...