WordPress security by component

YITH WooCommerce Ajax Search

Plugin description

YITH WooCommerce Ajax Search is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Oct 06, 2024; the highest CVE/CNA score is 9.3.

Plugin slug: yith-woocommerce-ajax-search

Latest vulnerability

CVE-2024-47350: YITH WooCommerce Ajax Search: SQL injection

YITH WooCommerce Ajax Search is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedOct 06, 2024

Safe version guidanceSee mitigation notes

		Safe version
Oct 06, 2024	CVE-2024-47350 YITH WooCommerce Ajax Search: SQL injection YITH WooCommerce Ajax Search is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE9.3 NVDPending
May 24, 2024	CVE-2024-4455 YITH WooCommerce Ajax Search: Cross-site scripting YITH WooCommerce Ajax Search is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE7.2 NVD6.1