| Package | Affected versions | Patched versions |
|---|---|---|
| wp-advanced-search | < 3.3.7 | 3.3.7 |
The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free