CVE Database /
CVE-2026-56070
CVE · Critical
CVE-2026-56070 — Advance Product Search- Voice & Ajax Search for WooCommerce [th-advance-product-search] < 1.4.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-56070
|
Advance Product Search- Voice & Ajax Search for WooCommerce [th-advance-product-search] < 1.4.5 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
Critical
9.3
|
< 1.4.5
|
1.4.5 |
2026-06-25 |
—
|
CVE-2026-56070
The Advance Product Search- Voice & Ajax Search plugin for WooCommerce has a security flaw in its interaction with SQL queries, allowing unauthorized individuals to inject malicious code when user input is not properly sanitized. This vulnerability affects versions up to 1.4.4 of the plugin, potentially enabling attackers to access sensitive database information without authentication.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings