WordPress Plugin Vulnerabilities

Advanced Woo Search < 2.00 - SQL query leak in ajax search

Description

Every ajax search returns the raw SQL query in the response.

Affects Plugins

Plugin icon
advanced-woo-search
Fixed in 2.00

References

CVE
CVE-2020-12070
URL
https://plugins.trac.wordpress.org/browser/advanced-woo-search/tags/1.99/includes/class-aws-search.php#L222

Miscellaneous

Verified
No
WPVDB ID
41496477-0382-4ea0-b800-c2a1b65187c8

Timeline

Publicly Published
2020-04-22 (about 6 years ago)
Added
2020-04-25 (about 6 years ago)
Last Updated
2020-04-26 (about 6 years ago)

Other

Published
Title
Published
2020-02-05
Title
Events Manager < 5.9.7.2 - CSV Injection
Published
2026-01-15
Title
Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit < 5.1.6 - Missing Authorization to Unauthenticated Rede Order Logs Deletion
Published
2025-02-17
Title
Uncode < 2.9.1.7 - Unauthenticated Arbitrary File Read in uncode_admin_get_oembed
Published
2014-08-01
Title
Persuasion <= 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Published
2024-05-23
Title
Elementor Header & Footer Builder < 1.6.26.1 - Contributor+ Stored XSS