CVE-2020-12104

The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation...

CVE-2022-47447

Cross-Site Request Forgery CSRF vulnerability in Mathieu Chartier WordPress WP-Advanced-Search plugin = 3.3.8 versions...

CVE-2022-47447

CVE-2022-47447 concerns the WordPress WP-Advanced-Search plugin. A CSRF vulnerability affects versions ≤ 3.3.8, with a fix released in 3.3.9. Patchstack lists unauthenticated access, indicating potential CSRF abuse to trigger unintended actions in a user’s account. Remediation: upgrade to 3.3.9 o...

Sql injection

The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation...