Known Vulnerabilities for Search API Autocomplete by Drupal
Listed below are 6 of the newest known vulnerabilities associated with "Search API Autocomplete" by "Drupal".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109983 json | The YMC Filter plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'post_title' parameter in ... | Not Provided | 2026-10-17 | 2026-10-18 |
| CVE-2026-109573 json | phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backsla... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-75916 json | SiYuan through 3.7.3 contains a cross-site scripting vulnerability in the '((' block-reference autocomplete hint popup. In ge... | Not Provided | 2026-08-19 | 2026-10-08 |
| CVE-2026-18110 json | Concrete CMS 9 (9.0.0 through 9.5.2) does not perform an authorization check on the user selector autocomplete endpoint (/ccm... | Not Provided | 2026-09-15 | 2026-09-22 |
| CVE-2026-16640 json | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Search API Autoc... | Not Provided | 2026-08-25 | 2026-08-26 |
| CVE-2026-16612 json | The FiboSearch WordPress plugin before 1.34.1 does not consistently exclude password-protected products from its unauthentic... | Not Provided | 2026-08-22 | 2026-08-23 |