Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Ajax Search Project Subscribe
Filtered by product Ajax Search
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-38456 1 Ajax Search Project 1 Ajax Search 2023-03-17 N/A 7.5 HIGH
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ernest Marcinko Ajax Search Lite plugin <= 4.10.3 versions.
CVE-2012-5853 1 Ajax Search Project 1 Ajax Search 2019-06-24 7.5 HIGH N/A
SQL injection vulnerability in the "the_search_function" function in cardoza_ajax_search.php in the AJAX Post Search (cardoza-ajax-search) plugin before 1.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the srch_txt parameter in a "the_search_text" action to wp-admin/admin-ajax.php.