Vulnerabilities in WPdreams
7 resultsCVE-2026-28139CRITICALWordPress Ajax Search Lite plugin <= 4.14.4 - PHP Object Injection vulnerabilityEPSS 0.6%CVE-2025-7956MEDIUMAjax Search Lite <= 4.13.1 - Missing Authorization to Unauthenticated Basic Information Exposure via ASL_Query in AJAX Search HandlerEPSS 0.3%CVE-2025-11926MEDIUMRelated Posts Lite <= 1.12 - Authenticated (Admin+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-48086MEDIUMWordPress Ajax Search Lite plugin <= 4.13.3 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-96331CRITICALWordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerabilityEPSS 0.2%CVE-2025-9618MEDIUMRelated Posts Lite <= 1.12 - Cross-Site Request ForgeryEPSS 0.1%CVE-2026-110360MEDIUMWordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerabilityEPSS —