wp-advanced-search vulnerabilities
1 known vulnerability in wp-advanced-search from Wp-advanced-search Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
WP-Advanced-Search: Improper Neutralization of Special Elements used in an SQL Command
The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks