Vulnerabilities (CVE)

Filtered by vendor Netflixtech Subscribe
Filtered by product Wp Autocomplete Search
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-4297 1 Netflixtech 1 Wp Autocomplete Search 2024-02-28 N/A 9.8 CRITICAL
The WP AutoComplete Search WordPress plugin through 1.0.4 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX available to unauthenticated users, leading to an unauthenticated SQL injection