5.9
Medium
CVE-2024-9796 The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a…
Description
The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP-Advanced-Search 3.3 | earliest → < 3.3.9.2 | 3.3.9.2 |
| wp-advanced-search 3.3 | earliest → < 3.3.9.2 | 3.3.9.2 |