Advisories · Technology

ThemeHunk Advance Product Search.

Every CVE that names ThemeHunk Advance Product Search among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66607 CVE record

CVSS 7.1 High

WordPress Advance Product Search plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
- ThemeHunk Advance Product Search
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2026
CVE-2026-56070 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Advance Product Search plugin <= 1.4.4 - SQL Injection vulnerability
- ThemeHunk Advance Product Search
- SQL injection
Not analysed yet 26 Jun 2026