Medium · 6.5 CVE-2022-40218 EUVD-2022-43516GHSA-rfgj-8gwg-qp4f

WordPress TH Advance Product Search plugin <= 1.1.4 - Unauthenticated Plugin Settings Change vulnerability

Published May 8, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ThemeHunk Product: Advance WordPress Search Plugin Category: Web / CMS

Description

Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.1.4.

Affected products

Vendor	Product	Affected	Fixed
ThemeHunk	Advance WordPress Search Plugin	≤ 1.1.4	—

References

https://patchstack.com/database/vulnerability/th-advance-product-search/wordpress-th-advance-product-search-plugin-1-1-4-unauthenticated-plugin-settings-change-vulnerability?_s_id=cve vdb-entry