Extension WordPress
Vulnérabilités Advanced Woo Search – Product Search for WooCommerce
Cette page rassemble les failles publiées pour Advanced Woo Search – Product Search for WooCommerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Advanced Woo Search – Product Search for WooCommerce
5 fiches
Advanced Woo Search <= 3.28 – Authenticated (Contributor+) Stored Cross-Site Scripting via aws_search_terms Shortcode
The Advanced Woo Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aws_search_terms shortcode in all versions up to, and including, 3.28 due to insufficient input sanitization and output escaping on user supplied attributes.…
*-3.28
3.29
25/03/2025
Advanced Woo Search <= 2.96 – Reflected Cross-Site Scripting
The Advanced Woo Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search parameter in all versions up to, and including, 2.96 due to insufficient input sanitization and output escaping. This makes it possible for…
*-2.96
2.97
12/01/2024
Advanced Woo Search <= 2.77 – Authenticated (Admin+) Stored Cross-Site Scripting
The Advanced Woo Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.77 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
*-2.77
2.78
01/05/2023
Advanced Woo Search <= 2.00 – Information Disclosure
The Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive information disclosure vulnerability in every ajax search request via the sql field to includes/class-aws-search.php.
*-1.99
2.00
23/04/2020
Advanced Woo Search <= 1.68 – Cross-Site Scripting
The Advanced Woo Search plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.68 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts…
*-1.68
1.70
02/05/2019
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.