Lucene search

K

Wp Autocomplete Search Security Vulnerabilities

cve
cve

CVE-2022-4297

The WP AutoComplete Search WordPress plugin through 1.0.4 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX available to unauthenticated users, leading to an unauthenticated SQL injection

9.8CVSS

9.8AI Score

0.008EPSS

2023-01-02 10:15 PM
38