Medium severity5.3NVD Advisory· Published Aug 15, 2022· Updated Jun 17, 2026
CVE-2022-2535
CVE-2022-2535
Description
The SearchWP Live Ajax Search WordPress plugin before 1.6.2 does not ensure that users making a live search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/draft/pending post titles along with their permalink
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<1.6.2+ 1 more
- (no CPE)range: <1.6.2
- (no CPE)range: <1.6.2
- cpe:2.3:a:searchwp:searchwp_live_ajax_search:*:*:*:*:*:wordpress:*:*Range: <1.6.2
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/0e13c375-044c-4c2e-ab8e-48cb89d90d02nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.