Medium · 6.5 CVE-2022-38057 EUVD-2022-40662GHSA-prx3-7v7j-286r

WordPress TH Advance Product Search plugin <= 1.2.1 - Unauthenticated Plugin Settings Reset vulnerability

Published Mar 25, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ThemeHunk Product: Advance WordPress Search Plugin Category: Web / CMS

Description

Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.2.1.

Affected products

Vendor	Product	Affected	Fixed
ThemeHunk	Advance WordPress Search Plugin	≤ 1.2.1	—

References

https://patchstack.com/database/vulnerability/th-advance-product-search/wordpress-th-advance-product-search-plugin-1-1-4-unauthenticated-plugin-settings-reset-vulnerability?_s_id=cve vdb-entry