{
 "id": "WPSEC-2026-1349",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1349/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1349/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1349/index.md",
 "title": "Ajax Search Lite <= 4.14.6 - Unauthenticated SQL Injection via Search Phrase",
 "description": "The Ajax Search Lite plugin for WordPress is vulnerable to SQL Injection via the search phrase in all versions up to, and including, 4.14.6, due to the search query's placeholder tokens being filled in with an array str_replace() call, which scans each inserted SQL fragment again for the later tokens. A phrase containing a token such as {like_query} therefore has a quoted SQL fragment inserted inside a string literal, which places the escaped phrase outside of any quotes. This makes it possible for unauthenticated attackers to append additional SQL queries to existing queries that can be used to extract sensitive information from the database.",
 "plugin": {
  "slug": "ajax-search-lite",
  "name": "Ajax Search Lite",
  "full_name": "Ajax Search Lite – Live Search & Filter",
  "wordpress_org": "https://wordpress.org/plugins/ajax-search-lite/",
  "advisories_url": "https://wpsec.com/vuln/plugin/ajax-search-lite/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/ajax-search-lite"
 },
 "type": "SQLI",
 "cwe": [
  "CWE-89"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 7.5,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "severity": "High"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "4.14.7",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 4.14.7"
  ]
 },
 "introduced_in": null,
 "fixed_in": "4.14.7",
 "remediation": "Update to 4.14.7 or later.",
 "fix_released": "2026-10-19T09:32:08+00:00",
 "published": "2026-10-21T12:44:50+00:00",
 "updated": "2026-10-21T12:33:20.678437+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1349/",
  "https://plugins.svn.wordpress.org/ajax-search-lite/tags/4.14.7/",
  "https://wordpress.org/plugins/ajax-search-lite/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/ajax-search-lite",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "High",
  "affected_versions": "High",
  "as_of": "2026-10-21"
 }
}