WordPress Plugin Vulnerabilities

Advanced Woo Search < 1.70 - CSRF & XSS

Description

CSRF leading to XSS

Sanitisation against XSS added in 1.70, however no CSRF checks are performed.

Affects Plugins

Plugin icon
advanced-woo-search
Fixed in 1.70

References

URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=2079301%40advanced-woo-search&old=2077958%40advanced-woo-search

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
17f23b9c-b447-438c-8950-55387eb70038

Timeline

Publicly Published
2019-05-02 (about 7 years ago)
Added
2019-06-24 (about 6 years ago)
Last Updated
2019-06-24 (about 6 years ago)

Other

Published
Title
Published
2025-03-03
Title
Slider by 10Web < 1.2.62 - Admin+ Stored XSS via Widget
Published
2025-12-04
Title
Jabbernotification <= 0.99-RC2 - Reflected Cross-Site Scripting via admin.php PATH_INFO
Published
2021-10-14
Title
Job Portal <= 0.0.1 - Admin+ Stored Cross-Site Scripting
Published
2024-08-26
Title
Beaver Builder < 2.8.3.4 - Reflected Cross-Site Scripting
Published
2025-03-27
Title
Better WishList API < 1.1.5 - Reflected Cross-Site Scripting