CVE-2026-96331

Summary

This vulnerability allows attackers to perform blind SQL injection attacks against the Ajax Search Pro plugin, potentially enabling unauthorized data access and manipulation. The flaw occurs when user input is not properly sanitized before being used in SQL queries.

Exploitability

Exploitation requires no authentication and can be achieved through crafted HTTP requests, making it highly exploitable with minimal preconditions.

Blast radius

An attacker could extract sensitive database information including user credentials, configuration data, and potentially gain unauthorized access to the WordPress site's backend.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 4.29.2 or later to remediate this SQL injection vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.