CVE-2020-12070

Summary: The WordPress plugin Advanced Woo Search (versions up to 1.99) exposes a sensitive information disclosure vulnerability. According to multiple connected sources, every ajax search request over the sql field in includes/class-aws-search.php can disclose sensitive data. The issue is docume...

CVE-2023-2452

CVE-2023-2452 affects the WordPress plugin Advanced Woo Search (versions ≤ 2.77). It is a stored XSS in admin settings exploitable by authenticated admins (Administrator+), with impact on multi-site installs and where unfiltered_html is disabled. The issue is due to insufficient input sanitizatio...

CVE-2024-0251

CVE-2024-0251 affects the WordPress plugin Advanced Woo Search (