High severity7.5NVD Advisory· Published Apr 24, 2020· Updated Jun 17, 2026

CVE-2020-12070

Description

The Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive information disclosure vulnerability in every ajax search request via the sql field to includes/class-aws-search.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Advanced Woo Search/Advanced Woo Search
cpe:2.3:a:advanced-woo-search:advanced_woo_search:*:*:*:*:*:wordpress:*:*
Range: <=1.99
Wordpress/Advanced Woo Searchdescription
WordPress/Advanced Woo Searchllm-fuzzy
Range: <=1.99
Package: https://wordpress.org/plugins/advanced-woo-search

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/browser/advanced-woo-search/tags/1.99/includes/class-aws-search.phpnvdProduct
plugins.trac.wordpress.org/browser/advanced-woo-search/tags/2.00/includes/class-aws-search.phpnvdProduct
wordpress.org/plugins/advanced-woo-search/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000