Wp Advanced Search
Approved changes feed: RSS · Atom
cpe:2.3:a:internet-formation:wp-advanced-search:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Internet Formation (be77ffc1-ebf6-5b08-bdcf-d5a3561bafaa) |
|---|---|
| Product | Wp Advanced Search (d073a0b8-5e66-5f11-a8ae-bc5d118ba206) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-plugins/wp-advanced-search |
purl2cpe | 2026-06-01 10:13:01.516139 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9796 |
vulnerable | 2026-06-08 07:00:28.677516 |
WP-Advanced-Search < 3.3.9.2 - Unauthenticated SQL Injection
The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks
Published: 2024-10-10T07:38:30.282Z
Updated: 2024-10-10T14:54:46.206Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10554 |
vulnerable | 2026-06-08 06:23:46.944594 |
WP-Advanced-Search < 3.3.9.3 - Admin+ Stored XSS
The WordPress WP-Advanced-Search WordPress plugin before 3.3.9.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Published: 2025-03-25T06:00:04.997Z
Updated: 2025-03-25T13:55:14.618Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47447 |
vulnerable | 2026-06-08 05:50:40.468118 |
WordPress WP-Advanced-Search Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Mathieu Chartier WordPress WP-Advanced-Search plugin <= 3.3.8 versions.
Published: 2023-05-24T16:10:09.601Z
Updated: 2026-04-28T16:07:57.589Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12104 |
vulnerable | 2026-06-08 05:17:56.464598 |
Details available
The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation.
Published: 2020-05-05T14:17:40.000Z
Updated: 2024-08-04T11:48:58.138Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.