The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks
PoC: CVE-2024-9796
POC (SQLi) -> CVE-2024-9796
PoC: CVE-2024-9796
WordPress WP-Advanced-Search <= 3.3.9 - Unauthenticated SQL Injection
PoC: CVE-2024-9796
WordPress WP-Advanced-Search <= 3.3.9 - Unauthenticated SQL Injection
PoC: CVE-2024-9796
CVE-2024-9796 poc
PoC: CVE-2024-9796
Vulnerable website to the CVE-2024-9796
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free