Ajax Search Lite (N/a Through 4.14.6) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/ajax-search-lite-n/a-through-4.14.6/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 21 Oct 2026 16:09:05 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgWPdreams Ajax Search Lite: Blind SQL Injection (CVE-2026-111852)https://feed.craftedsignal.io/briefs/2026-10-ajax-search-lite-sqli/Wed, 21 Oct 2026 16:09:05 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-ajax-search-lite-sqli/WPdreams Ajax Search Lite (up to version 4.14.6) contains a Blind SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command.<p>CVE-2026-111852 identifies a Blind SQL Injection vulnerability in the WPdreams Ajax Search Lite plugin, affecting versions from n/a through 4.14.6. The vulnerability stems from improper neutralization of special elements used in an SQL command. The CVSS v3.1 base score is 9.3.</p> criticaladvisory