SearchWP Live Ajax Search 漏洞列表
共找到 2 个与 SearchWP Live Ajax Search 相关的漏洞
📅 加载漏洞趋势中...
-
CVE-2022-2535: SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure POC
The plugin does not ensure that users making. alive search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/draft/pending post titles along with their permalink -
CVE-2022-2535: SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure POC
The plugin does not ensure that users making. alive search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/draft/pending post titles along with their permalink