Critical · 9.3 CVE-2024-47350 EUVD-2024-42386GHSA-v5f3-4485-hv7p

WordPress YITH WooCommerce Ajax Search plugin <= 2.8.0 - SQL Injection vulnerability

Published Oct 6, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: YITHEMES Product: YITH WooCommerce Ajax Search Category: Web / CMS

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITHEMES YITH WooCommerce Ajax Search yith-woocommerce-ajax-search.This issue affects YITH WooCommerce Ajax Search: from n/a through <= 2.8.0.

Affected products

Vendor	Product	Affected	Fixed
YITHEMES	YITH WooCommerce Ajax Search	≤ 2.8.0	—

References

https://patchstack.com/database/Wordpress/Plugin/yith-woocommerce-ajax-search/vulnerability/wordpress-yith-woocommerce-ajax-search-plugin-2-8-0-sql-injection-vulnerability?_s_id=cve vdb-entry