WordPress security by component
Advanced Woo Search
Plugin description
Advanced Woo Search is a WordPress component with 4 published CVE records in this archive. The latest tracked vulnerability was published Mar 26, 2025; the highest CVE/CNA score is 7.5.
Plugin slug:
advanced-woo-searchLatest vulnerability
CVE-2025-2302: Advanced Woo Search: Cross-site scripting
Advanced Woo Search is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
| Safe version |
|
||
|---|---|---|---|
| Mar 26, 2025 |
CVE-2025-2302
Advanced Woo Search: Cross-site scripting
Advanced Woo Search is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVDPending
|
| Jan 13, 2024 |
CVE-2024-0251
Advanced Woo Search: Cross-site scripting
Advanced Woo Search is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.1
NVD6.1
|
| Jun 09, 2023 |
CVE-2023-2452
Advanced Woo Search: Cross-site scripting
Advanced Woo Search is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE4.4
NVD4.4
|
| Apr 24, 2020 |
CVE-2020-12070
Advanced Woo Search: Sensitive information exposure
Advanced Woo Search is affected by sensitive information exposure. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE7.5
NVD7.5
|