Skip to content
Threat Feed
Subscribe

Product

Advance Product Search- Voice & Ajax Search for WooCommerce Plugin (<= 1.4.4)

1 brief RSS
high advisory

SQL Injection Vulnerability in WordPress WooCommerce Advanced Product Search Plugin (CVE-2026-12753)

A SQL Injection vulnerability, CVE-2026-12753, has been identified in the Advance Product Search- Voice & Ajax Search for WooCommerce plugin for WordPress, affecting all versions up to and including 1.4.4. The flaw, caused by insufficient input sanitization of the 's' and 'match' parameters and inadequate SQL query preparation, allows unauthenticated attackers to append arbitrary SQL queries. This enables them to extract sensitive information directly from the database.

Advance Product Search- Voice & Ajax Search for WooCommerce plugin wordpress woocommerce sql-injection web-vulnerability
1r 2t 1c