wpdreams vulnerabilities
8 published CVEs name wpdreams among the affected products.
- 8Published CVEs8 of them scored
- 4Last 12 monthspublished in the last year
- 3Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-111852
WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability
WPdreams · Ajax Search Lite
Critical9.3 - CVE-2026-110360
WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerability
WPdreams · Ajax Search Lite
Medium5.3 - CVE-2026-96331
WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerability
wpdreams · Ajax Search Pro
Critical9.3 - CVE-2026-28139
WordPress Ajax Search Lite plugin <= 4.14.4 - PHP Object Injection vulnerability
wpdreams · Ajax Search Lite
Critical9.8 - CVE-2025-48086
WordPress Ajax Search Lite plugin <= 4.13.3 - PHP Object Injection vulnerability
wpdreams · Ajax Search Lite
Medium5.5 - CVE-2025-11926
Related Posts Lite <= 1.12 - Authenticated (Admin+) Stored Cross-Site Scripting
wpdreams · Related Posts Lite
Medium4.4 - CVE-2025-9618
Related Posts Lite <= 1.12 - Cross-Site Request Forgery
wpdreams · Related Posts Lite
Medium4.3 - CVE-2025-7956
Ajax Search Lite <= 4.13.1 - Missing Authorization to Unauthenticated Basic Information Exposure via ASL_Query in AJAX Search Handler
wpdreams · Ajax Search Lite – Live Search & Filter
Medium5.3