CVE-2026-111852

Summary

Blind SQL injection in WPdreams Ajax Search Lite via the 'ajax-search-lite' plugin allows attackers to infer database contents by observing timing or response differences, without direct data exfiltration.

Exploitability

Exploitation requires no authentication and can be performed remotely over HTTP, but success depends on the application's error handling and timing behavior.

Blast radius

An attacker could extract sensitive database contents (e.g., user credentials, private posts) through time-based or boolean-based blind techniques, potentially compromising all data stored in the WordPress database.

Detection

Look for HTTP requests with unusually long response times (e.g., >5 seconds) or repeated SQL injection payloads such as 'AND SLEEP(5)' or 'OR 1=1' in query parameters or POST bodies logged by the web server or WAF.

Prioritized remediation

Upgrade to version 4.14.7 or later, as the vulnerability is fixed in that release.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.