51 matches found
WordPress WP-Advanced-Search <= 3.3.9 - SQL Injection
The WordPress WP-Advanced-Search plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated...
CVE-2024-9796
CVE-2024-9796 WordPress WP-Advanced-Search = 5.0.12 time-based blind IF - comment Payload: t=wpautosuggest&f=ifnow=sysdate,SLEEP9,0-- wXyW&l=5&type=0&e=utf-8&q=c&limit=5×tamp=13672261755853'...
CVE-2024-9796
CVE-2024-9796 WP-Advanced-Search 3.3.9.2 - Inyección SQL no autenticada Descripción La inyección SQL del PoC extraerá los usuarios y hashes de WordPress. Descargo de responsabilidad: Este script es solo para uso educativo. No lo uses para fines ilegales. Si lo haces, es totalmente tu...
CVE-2024-9796
CVE-2024-9796 POC SQLi - CVE-2024-9796 PoC funcional para la vulnerabilidad CVE-2024-9796, que afecta al plugin WP Advanced Search autocompletion en WordPress, permitiendo una inyección SQL SQL Injection a través de parámetros GET no sanitizados. 📌 Descripción Esta vulnerabilidad permite a un...
CVE-2022-47447
CVE-2022-47447 POC CSRF - CVE-2022-47447 ⚠️ Uso exclusivo para fines educativos y entornos autorizados. PoC funcional para la vulnerabilidad CVE-2022-47447, que afecta a un plugin de WordPress vulnerable, permitiendo un ataque de tipo Cross-Site Request Forgery CSRF contra usuarios autenticados...
CVE-2025-39538
🛡️ CVE-2025-39538 - WordPress WP-Advanced-Search = 3.3.9.3 Subida Arbitraria de Archivos CVE-2025-39538 Publicado: 2025-04-16 Tipo de Vulnerabilidad: Subida Arbitraria de Archivos Subida sin Restricciones de Archivos con Tipo Peligroso Plugin Afectado: WP-Advanced-Search por Mathieu Chartier...
CVE-2020-12104
The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation...
CVE-2025-62138: Missing Authorization
Missing Authorization vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Advanced PDF: from n/a through = 1.1.7...
EUVD-2020-4420
Malware in sbrugna...
EUVD-2025-11333
Malicious code in bioql PyPI...
EUVD-2025-2983
Malicious code in bioql PyPI...
EUVD-2022-50209
Malicious code in bioql PyPI...
CVE-2025-57945
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Stored XSS.This issue affects WP Advanced PDF: from n/a through = 1.1.7...
CVE-2025-57945
CVE-2025-57945 is an Stored XSS vulnerability in WP Advanced PDF affecting WP Advanced PDF versions from n/a up to and including 1.1.7. The CVE is documented with a CVSS v3.1 base score of 5.9 (Medium) and an attack vector over the network, with user interaction required. The connected Wordfence ...
CVE-2025-57945: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Stored XSS.This issue affects WP Advanced PDF: from n/a through = 1.1.7...
CVE-2022-47447
Cross-Site Request Forgery CSRF vulnerability in Mathieu Chartier WordPress WP-Advanced-Search plugin = 3.3.8 versions...
CVE-2025-39538
Unrestricted Upload of File with Dangerous Type vulnerability in Mathieu Chartier WP-Advanced-Search wp-advanced-search allows Upload a Web Shell to a Web Server.This issue affects WP-Advanced-Search: from n/a through = 3.3.9.4...
CVE-2025-39538
Unrestricted Upload of File with Dangerous Type vulnerability in Mathieu Chartier WP-Advanced-Search wp-advanced-search allows Upload a Web Shell to a Web Server.This issue affects WP-Advanced-Search: from n/a through = 3.3.9.4...
CVE-2025-39538 WordPress WP-Advanced-Search plugin <= 3.3.9.4 - Arbitrary File Upload Vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Mathieu Chartier WP-Advanced-Search wp-advanced-search allows Upload a Web Shell to a Web Server.This issue affects WP-Advanced-Search: from n/a through = 3.3.9.4...
CVE-2025-39538 WordPress WP-Advanced-Search <= 3.3.9.3 - Arbitrary File Upload Vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Mathieu Chartier WP-Advanced-Search allows Upload a Web Shell to a Web Server. This issue affects WP-Advanced-Search: from n/a through 3.3.9.3...