WordPress Plugin Vulnerabilities

WP-Advanced-Search < 3.3.9.2 - Unauthenticated SQL Injection

Description

The plugin does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks

Proof of Concept

Affects Plugins

Plugin icon
wp-advanced-search
Fixed in 3.3.9.2

References

CVE
CVE-2024-9796

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
8.6 (high)

Miscellaneous

Original Researcher
Wojciech Jezowski
Submitter
Wojciech Jezowski
Verified
Yes
WPVDB ID
2ddd6839-6bcb-4bb8-97e0-1516b8c2b99b

Timeline

Publicly Published
2024-09-17 (about 1 year ago)
Added
2024-10-09 (about 1 year ago)
Last Updated
2024-10-10 (about 1 year ago)

Other

Published
Title
Published
2025-03-12
Title
WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins < 2.33 - Authenticated (Admin+) SQL Injection
Published
2023-10-18
Title
GeoDirectory < 2.3.29 - Authenticated (Administrator+) SQL Injection via orderby
Published
2022-04-05
Title
Documentor <= 1.5.3 - Unauthenticated SQLi
Published
2024-10-31
Title
Porsline < 1.1 - Contributor+ SQL Injection
Published
2025-05-19
Title
RSVPMarker < 11.5.7 - Authenticated (Contributor+) SQL Injection