WordPress Plugin Vulnerabilities

Ajax Post Search <= 1.3 - SQL Injection

Description

The cardoza-ajax-search WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
cardoza-ajax-search
Fixed in 1.4

References

CVE
CVE-2012-5853
URL
https://seclists.org/bugtraq/2012/Nov/33

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
b1d81640-6d9f-4f34-b433-e4631235b47a

Timeline

Publicly Published
2012-11-05 (about 13 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-05-07
Title
YaySMTP < 2.6.5 - Authenticated (Administrator+) SQL Injection
Published
2026-01-28
Title
Uroan Core <= 1.4.4 - Unauthenticated SQL Injection
Published
2023-03-22
Title
Formidable PRO2PDF < 3.11 - Subscriber+ SQLi
Published
2025-10-27
Title
HUSKY < 1.3.7.2 - Unauthenticated SQL Injection via `phrase` Parameter
Published
2023-01-17
Title
Simple URLs < 115 - Subscriber+ SQLi