VYPR

Ajax Woosearch

by WordPress

Source repositories

CVEs (1)

  • CVE-2025-9697CriOct 2, 2025
    risk 0.64cvss 9.8epss 0.00

    The Ajax WooSearch WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection