CVE-2026-56070 Scanner

Advance Product Search is a plugin used in WordPress environments to enhance the search functionality of websites. Businesses and developers integrate this plugin to provide advanced search features to users visiting their sites. The plugin is popular for its ability to allow users to filter and search products easily, making it crucial in e-commerce settings. It is typically used by developers to tailor the search experience according to site-specific requirements. This plugin is an integral part of WordPress's enhanced user experience, particularly for websites with extensive product listings. Other companies use this plugin to improve product discoverability and streamline user interaction on their platforms.

The vulnerability detected in the Advance Product Search plugin is a critical SQL Injection (SQLi) issue. Such vulnerabilities occur when untrusted data is sent to an interpreter as part of a command or query, allowing attackers to manipulate the SQL queries executed by the database. The vulnerability in this case is unauthenticated, meaning it can be exploited without any credentials. This type of injection can severely impact data integrity, leading to unauthorized data access or data modification. In this plugin, the vulnerability is accessed via the ?s= parameter, which is a common user input vector used for search terms.

The technical detail of the vulnerability involves the plugin's failure to sanitize input adequately. The issue lies in how the plugin reconstructs SQL queries, specifically using $wpdb->esc_like() which fails to escape single quotes, allowing time-based blind SQL injection through the ?s= parameter. This allows attackers to inject arbitrary SQL through the manipulated input, leading to a significant delay in response or data theft. The plugin does not properly handle the crafted requests, leaving it susceptible to exploitation. The matchers in the scanning script are designed to recognize delayed responses which indicate successful SQL Injection exploitation.

Exploiting this vulnerability can lead to a range of harmful effects. Attackers may gain unauthorized access to data, which can result in data leaks involving sensitive user information. They might modify or corrupt data, leading to loss of integrity and availability of information stored in the database. The exploitation can also allow attackers to obtain administrative credentials to take over the system or deface the website. Furthermore, it can serve as a stepping stone for more intrusive attacks or persistence methods, severely impacting the organization's operations and reputation.

REFERENCES

• https://nvd.nist.gov/vuln/detail/CVE-2026-56070
• https://patchstack.com/database/wordpress/plugin/th-advance-product-search/vulnerability/wordpress-advance-product-search-plugin-1-4-4-sql-injection-vulnerability?_s_id=cve