Vendor
WPdreams Ajax Search Lite (up to version 4.14.6) contains a Blind SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command.