Advance Product Search <= 1.4.4 - Unauthenticated Time-Based Blind SQL Injection
Advance Product Search 1.4.4 and earlier is vulnerable to unauthenticated time-based blind SQL injection. The plugin rebuilds the WordPress search SQL by hand and uses $wpdb->esc_like() which escapes LIKE wildcards but not single quotes, allowing injection through the ?s= parameter. References: https://nvd.nist.gov/vuln/detail/CVE-2026-56070 https://patchstack.com/database/wordpress/plugin/th-advance-product-search/vulnerability/wordpress-advance-product-search-plugin-1-4-4-sql-injection-vulnerability?_s_id=cve Remediation: Update to the latest version beyond 1.4.4.
10 assets checked · domain, subdomain, ipv4