cbcvebase.

Searchwp Live Ajax Search vulnerabilities

1 known vulnerability affecting searchwp/searchwp_live_ajax_search.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2022-2535P3MEDIUMCVSS 5.3PoCfixed in 1.6.22022-08-15
CVE-2022-2535 [MEDIUM] CWE-639 CVE-2022-2535: The SearchWP Live Ajax Search WordPress plugin before 1.6.2 does not ensure that users making a live The SearchWP Live Ajax Search WordPress plugin before 1.6.2 does not ensure that users making a live search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/draft/pending post titles along with their permalink
nvd
Searchwp Live Ajax Search vulnerabilities | cvebase