CVE-2026-96331: WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro: from n/a through 4.29.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Ajax Search Pro (ajax-search-pro)to a version that resolves this vulnerability.Fixed in 4.29.2
Event History
Frequently Asked Questions
Who can exploit this issue?
The vector is network-accessible, requires no privileges, and requires no user interaction. An unauthenticated remote attacker can potentially exploit it.
What versions are affected?
Ajax Search Pro versions through 4.29.1 are affected. The affected range is listed as from an unspecified earlier version through 4.29.1.
What is the likely impact?
The issue is a blind SQL injection vulnerability with high confidentiality impact and low availability impact. Integrity impact is listed as none.