Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

wpdreams vulnerabilities

8 published CVEs name wpdreams among the affected products.

Newest CVEs

  • CVE-2026-111852

    WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability

    WPdreams · Ajax Search Lite

    Critical9.3
  • CVE-2026-110360

    WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerability

    WPdreams · Ajax Search Lite

    Medium5.3
  • CVE-2026-96331

    WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerability

    wpdreams · Ajax Search Pro

    Critical9.3
  • CVE-2026-28139

    WordPress Ajax Search Lite plugin <= 4.14.4 - PHP Object Injection vulnerability

    wpdreams · Ajax Search Lite

    Critical9.8
  • CVE-2025-48086

    WordPress Ajax Search Lite plugin <= 4.13.3 - PHP Object Injection vulnerability

    wpdreams · Ajax Search Lite

    Medium5.5
  • CVE-2025-11926

    Related Posts Lite <= 1.12 - Authenticated (Admin+) Stored Cross-Site Scripting

    wpdreams · Related Posts Lite

    Medium4.4
  • CVE-2025-9618

    Related Posts Lite <= 1.12 - Cross-Site Request Forgery

    wpdreams · Related Posts Lite

    Medium4.3
  • CVE-2025-7956

    Ajax Search Lite <= 4.13.1 - Missing Authorization to Unauthenticated Basic Information Exposure via ASL_Query in AJAX Search Handler

    wpdreams · Ajax Search Lite – Live Search & Filter

    Medium5.3