← Database

CVE-2024-9796

CRITICAL CVSS: 9.8 Published: 2024-10-10 Modified: 2026-06-17

Description

The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks

Affected Platforms

Internet-Formation Wp-Advanced-Search

Weakness Type

CWE-89

References