PLUGIN SECURITY
Is Advanced Woo Search safe?
Advanced WooCommerce product search plugin. Search inside any product field. Support for both AJAX search and search results page.
What this plugin does
- Slug:
advanced-woo-search - Author: ILLID
- 70000+ active installs
- 96/100 rating (248 reviews on wordpress.org)
- 5608727 all-time downloads
- On WordPress.org since 2016-01-30
live searchproduct searchsearchwoocommercewoocommerce search
Maintenance status
- Latest known version: 3.68
- Last updated: 2026-08-13 11:43am GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.0+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
4 known CVEs on file for Advanced Woo Search.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-0251 | Advanced Woo Search – Product Search for WooCommerce [advanced-woo-search] < 2.97 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 2.97 | 2.97 | 2024-01-12 | ✓ fixed in latest |
| CVE-2023-2452 | Advanced Woo Search – Product Search for WooCommerce [advanced-woo-search] < 2.78 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.4 | < 2.78 | 2.78 | 2023-05-01 | ✓ fixed in latest |
| CVE-2020-12070 | Advanced Woo Search – Product Search for WooCommerce [advanced-woo-search] < 2.0 | Exposure of Sensitive Information to an Unauthorized Actor | High 7.5 | < 2.0 | 2.0 | 2020-04-22 | ✓ fixed in latest |
| — | Advanced Woo Search – Product Search for WooCommerce [advanced-woo-search] < 1.70 | — | Unknown | < 1.70 | 1.70 | 2019-05-02 | ✓ fixed in latest |
| — | Advanced Woo Search – Product Search for WooCommerce [advanced-woo-search] < 3.29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 3.29 | 3.29 | 0000-00-00 | ✓ fixed in latest |
| — | Advanced Woo Search – Product Search for WooCommerce [advanced-woo-search] < 1.70 | — | Unknown | < 1.70 | 1.70 | — | ✓ fixed in latest |
| — | Advanced Woo Search < 1.70 - CSRF & XSS | — | Unknown | < 1.70 | 1.70 | — | ✓ fixed in latest |
| CVE-2025-2302 | Advanced Woo Search < 3.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via aws_search_terms Shortcode | — | Unknown | < 3.29 | 3.29 | — | ✓ fixed in latest |
How to fix it
Keep Advanced Woo Search updated — 3.68 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- FiboSearch – Ajax Search for WooCommerce — 100000+ active installs — 98/100 (1814) — max PHP 8.4
- Relevanssi – A Better Search — 100000+ active installs — 96/100 (405) — max PHP 8.4
- Ajax Search Lite – Live Search & Filter — 70000+ active installs — 96/100 (264) — max PHP 8.4
- Themify – WooCommerce Product Filter — 20000+ active installs — 70/100 (72) — max PHP 8.4
- Advance Product Search- Voice & Ajax Search for WooCommerce — 9000+ active installs — 100/100 (5) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.