Mmastodon TechnologyCybersecurity first seen 23 d ago, last 23 d ago, peak #9

Critical SQL Injection Flaw Found in Ajax Search Lite Plugin

Original: 🚨 EUVD-2026-107273 📊 Score: 9.3/10 (CVSS v3.1) 📦 Product: Ajax Search Lite 🏢 Vendor: wpdreams 📅 Updated: 2026-10-21 📝 Im

A high-severity vulnerability, EUVD-2026-107273, has been disclosed in the WordPress plugin Ajax Search Lite by vendor WPdreams. The flaw is a blind SQL injection with a CVSS v3.1 score of 9.3, meaning attackers could potentially read or manipulate the site's database through the plugin's search function. The record was updated on 21 October 2026.

Why now: A critical SQL injection flaw in a widely used WordPress plugin puts many websites at risk

Ajax Search LiteWPdreamsWordPress

Open on mastodon →

Evidence

• 🚨 EUVD-2026-107273 📊 Score: 9.3/10 (CVSS v3.1) 📦 Product: Ajax Search Lite 🏢 Vendor: wpdreams 📅 Updated: 2026-10-21 📝 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Blind… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3131726