Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-111852 EUVD-2026-107273GHSA-rxg4-hh2m-h7g8

WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability

Published Oct 21, 2026 · Updated Oct 21, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Blind SQL Injection.This issue affects Ajax Search Lite: from n/a through 4.14.6.

Affected products

VendorProductAffectedFixed
WPdreams Ajax Search Lite ≤ 4.14.6 —

References