Lucene search
+L

141 matches found

NVD
NVD
added 2026/08/31 4:17 a.m.7 views

CVE-2026-82613

A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultList of the file /index.php?q=product of the component Product Search Interface. Performing a manipulation of the argument Search results in sql injection. The attack may be...

7.5CVSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/31 4:00 a.m.12 views

CVE-2026-82613 itsourcecode Online Medicine Delivery System Product Search index.php loadResultList sql injection

A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultList of the file /index.php?q=product of the component Product Search Interface. Performing a manipulation of the argument Search results in sql injection. The attack may be...

7.5CVSS
SaveExploits0References6
CVE
CVE
added 2026/08/31 4:00 a.m.12 views

CVE-2026-82613

A SQL injection vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0 , specifically in the loadResultList function within the file /index.php?q=product (Product Search Interface). The flaw is triggered by manipulating the Search argument, allowing an unauthenticated re...

7.5CVSS6.9AI score
SaveExploits0References6
EUVD
EUVD
added 2026/08/31 4:00 a.m.6 views

EUVD-2026-68341

A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultList of the file /index.php?q=product of the component Product Search Interface. Performing a manipulation of the argument Search results in sql injection. The attack may be...

7.5CVSS6.9AI score
SaveExploits0References6
NVD
NVD
added 2026/08/20 12:16 p.m.7 views

CVE-2026-66607

Unauthenticated Cross Site Scripting XSS in Advance Product Search = 1.4.8 versions...

7.1CVSS0.0018EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/20 12:07 p.m.8 views

EUVD-2026-63294

Unauthenticated Cross Site Scripting XSS in Advance Product Search = 1.4.8 versions...

7.1CVSS5.1AI score0.0018EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/20 12:07 p.m.28 views

CVE-2026-66607 WordPress Advance Product Search plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Advance Product Search = 1.4.8 versions...

7.1CVSS0.0018EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/20 12:07 p.m.21 views

CVE-2026-66607

The WordPress Advance Product Search plugin (versions ≤ 1.4.8) has an unauthenticated XSS flaw with CVSS 7.1 (HIGH). Patchstack is the source; the Patchstack advisory link is provided in the references. No exploitation evidence is reported in the provided documents.

7.1CVSS5.1AI score0.0018EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/08/19 11:12 a.m.9 views

WordPress Advance Product Search plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by sequenceX0 in WordPress Plugin Advance Product Search versions = 1.4.8...

7.1CVSS5AI score0.0018EPSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/16 2:30 a.m.9 views

CVE-2026-12753

The Advance Product Search- Voice & Ajax Search for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 's' and 'match' parameter in all versions up to, and including, 1.4.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ...

7.5CVSS6.1AI score0.00505EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/16 2:30 a.m.15 views

EUVD-2026-44857

The Advance Product Search- Voice & Ajax Search for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 's' and 'match' parameter in all versions up to, and including, 1.4.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ...

7.5CVSS6.1AI score0.00505EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/16 2:30 a.m.50 views

CVE-2026-12753 Advance Product Search- Voice & Ajax Search for WooCommerce <= 1.4.4 - Unauthenticated SQL Injection via 's' and 'match' Parameter

The Advance Product Search- Voice & Ajax Search for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 's' and 'match' parameter in all versions up to, and including, 1.4.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ...

7.5CVSS0.00505EPSS
SaveExploits0References5
NVD
NVD
added 2026/06/26 3:16 p.m.12 views

CVE-2026-56070

Unauthenticated SQL Injection in Advance Product Search = 1.4.4 versions...

9.3CVSS0.004EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/26 2:52 p.m.58 views

CVE-2026-56070 WordPress Advance Product Search plugin <= 1.4.4 - SQL Injection vulnerability

Unauthenticated SQL Injection in Advance Product Search = 1.4.4 versions...

9.3CVSS0.004EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/26 2:52 p.m.21 views

EUVD-2026-39723

Unauthenticated SQL Injection in Advance Product Search = 1.4.4 versions...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/26 2:52 p.m.27 views

CVE-2026-56070

WordPress Advance Product Search plugin (

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/15 9:16 p.m.15 views

CVE-2026-42664

Unauthenticated Broken Access Control in AI Product Search for WooCommerce Motive Commerce Search = 1.38.2 versions...

8.2CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/15 8:18 p.m.26 views

CVE-2026-42664

CVE-2026-42664 affects the WordPress plugin AI Product Search for WooCommerce – Motive Commerce Search, version

8.2CVSS5.1AI score0.00254EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/15 8:18 p.m.17 views

EUVD-2026-36829

Unauthenticated Broken Access Control in AI Product Search for WooCommerce Motive Commerce Search = 1.38.2 versions...

8.2CVSS5.1AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/15 8:18 p.m.38 views

CVE-2026-42664 WordPress AI Product Search for WooCommerce – Motive Commerce Search plugin <= 1.38.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in AI Product Search for WooCommerce Motive Commerce Search = 1.38.2 versions...

8.2CVSS0.00254EPSS
SaveExploits0References1
Rows per page
Query Builder