WordPress Plugin Vulnerabilities

SearchAutocomplete <= 1.0.8 - Unauthenticated SQL Injection

Description

The SearchAutocomplete WordPress plugin was affected by an Unauthenticated SQL Injection security vulnerability.

Affects Plugins

Plugin icon
search-autocomplete
Fixed in 1.0.9

References

Exploitdb
17767
URL
https://plugins.trac.wordpress.org/changeset/431803/search-autocomplete

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
44b30de3-1d38-486f-b90c-0e66e62d6f6a

Timeline

Publicly Published
2011-09-01 (about 14 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2011-02-08
Title
Cdnvote < 0.4.2 - Multiple SQL Injections
Published
2024-02-27
Title
WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection
Published
2024-03-28
Title
Media Library Folders < 8.1.8 - Authenticated (Author+) SQL Injection
Published
2024-06-10
Title
Blog2Social: Social Media Auto Post & Scheduler < 7.4.2 - Authenticated (Subscriber+) SQL Injection
Published
2025-10-02
Title
Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection