CVE-2026-111852

LOWCVSS 9.3 · CRITICAL

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Blind SQL Injection.This issue affects Ajax Search Lite: from n/a through 4.14.6.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/wordpress/plugin/ajax-search-lite/vulnerability/wordpress-ajax-search-lite-plugin-4-14-6-sql-injection-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

Donweb Media@DonwebMedia23h
¿Usás Ajax Search Lite en tu WordPress? Apareció una falla crítica de SQL injection (CVE-2026-111852) que te deja expuesto si no actualizás. Mejor no esperar: https://seguridadenwordpress.com/cve-2026-111852-ajax-search-lite-vulnerabilidad/ 🔒 #WordPress #AjaxSearchLite
0000027
9 followersView on X

Explore more

Back to dashboard