Advanced Woo Search – Product Search for WooCommerce

Advanced Woo Search – Product Search for WooCommerce has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2025; all 5 are fixed as of October 2026. Their average CVSS score is 5.9, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 4 of the records (80%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 5 issues recorded for Advanced Woo Search – Product Search for WooCommerce has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Advanced Woo Search – Product Search for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2

Advanced Woo Search <= 1.68 - Cross-Site Scripting

Read the full analysis

Vulnerability Records

5 records


2025-03-25 10:58	Advanced Woo Search <= 3.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via aws_search_terms Shortcode Advanced Woo Search <= 3.28	`CVE-2025-2302`	6.4 Medium	Muhammad Yudha - DJ	Yes
2024-01-12 00:00	Advanced Woo Search <= 2.96 - Reflected Cross-Site Scripting Advanced Woo Search <= 2.96	`CVE-2024-0251`	6.1 Medium	Artem Guzhva (hexcat)	Yes
2023-05-01 00:00	Advanced Woo Search <= 2.77 - Authenticated (Admin+) Stored Cross-Site Scripting Advanced Woo Search <= 2.77	`CVE-2023-2452`	4.4 Medium	Ivan Kuzymchak	Yes
2020-04-23 00:00	Advanced Woo Search <= 2.00 - Information Disclosure Advanced Woo Search <= 1.99	`CVE-2020-12070`	5.3 Medium	Anonymous	Yes
2019-05-02 00:00	Advanced Woo Search <= 1.68 - Cross-Site Scripting Advanced Woo Search <= 1.68	`N/A`	7.2 High	Anonymous	Yes

Showing 1–5 of 5 reports