PT-2020-13023
CVE-2020-12070
·
تاريخ النشر
2020-04-24
·
تاريخ التحديث
2020-05-01
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Advanced Woo Search plugin versions through 1.99
Description
The issue concerns a sensitive information disclosure problem. It occurs in every AJAX search request via the
sql field to the includes/class-aws-search.php file.Recommendations
For Advanced Woo Search plugin versions through 1.99, consider disabling the AJAX search functionality until a patch is available. Restrict access to the
includes/class-aws-search.php file to minimize the risk of exploitation. Avoid using the sql field in AJAX search requests until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾