Known Vulnerabilities for Ajax Search Pro by Wpdreams
Listed below are 10 of the newest known vulnerabilities associated with "Ajax Search Pro" by "Wpdreams".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111852 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdreams Ajax Search Li... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-110360 json | Missing Authorization vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Exploiting Incorrectly Configured Ac... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-108726 json | GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged u... | Not Provided | 2026-10-11 | 2026-10-13 |
| CVE-2026-104995 json | The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 via th... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-103907 json | The JNews - Jeg Elementor Kit plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability c... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-100106 json | The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pur... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-96553 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Damian Góra FiboSearch... | Not Provided | 2026-10-09 | 2026-10-11 |
| CVE-2026-96352 json | Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions. | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-96331 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pr... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-95665 json | MISP contains a reflected cross-site scripting (XSS) vulnerability in the event REST search export confirmation form. The vie... | Not Provided | 2026-09-22 | 2026-09-22 |