{"id":"CVE-2026-111852","published":"2026-10-21T15:17:16.140","lastModified":"2026-10-21T18:19:16.950","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Blind SQL Injection.This issue affects Ajax Search Lite: from n/a through 4.14.6.","cvssScore":9.3,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/ajax-search-lite/vulnerability/wordpress-ajax-search-lite-plugin-4-14-6-sql-injection-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Blind SQL injection in WPdreams Ajax Search Lite via the 'ajax-search-lite' plugin allows attackers to infer database contents by observing timing or response differences, without direct data exfiltration.","exploitability":"Exploitation requires no authentication and can be performed remotely over HTTP, but success depends on the application's error handling and timing behavior.","blast_radius":"An attacker could extract sensitive database contents (e.g., user credentials, private posts) through time-based or boolean-based blind techniques, potentially compromising all data stored in the WordPress database.","remediation":"Upgrade to version 4.14.7 or later, as the vulnerability is fixed in that release.","detection":"Look for HTTP requests with unusually long response times (e.g., >5 seconds) or repeated SQL injection payloads such as 'AND SLEEP(5)' or 'OR 1=1' in query parameters or POST bodies logged by the web server or WAF.","tags":["sql-injection","blind-sqli","web","wordpress","plugin"],"model":"garnet-coder","analyzedAt":"2026-10-25T08:47:58.268Z"}}