Known CVE

SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure

The plugin does not ensure that users making. alive search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/draft/pending post titles along with their permalink

CVE-2022-2535

Medium2022CVSS 5.3CWE-639

cve2022 · wp · wp-plugin · wordpress · wpscan · searchwp-live-ajax-search · searchwp · vuln

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website