CVE-2026-56070criticalCWE-89

CVE-2026-56070: critical vulnerability in ThemeHunk Advance Product Search

WordPress Advance Product Search plugin <= 1.4.4 - SQL Injection vulnerability

Published 26 Jun 2026

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

43Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 9.3epss 1.4%

Unauthenticated SQL Injection in Advance Product Search <= 1.4.4 versions.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Affected products

Related CVEs — ThemeHunk Advance Product Search

In the same product, most dangerous first.

References