eliekhoury Vulnerabilities and Affected Products
Vulnerabilities associated with WP AutoSuggest.
Products
Clear product- WP AutoSuggest1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2018-25434HIGH | WP AutoSuggest 0.24 SQL Injection via autosuggest.phpWP AutoSuggest 0.24 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wpas_keys parameter. Attackers can send GET requests to autosuggest.php with crafted wpas_keys values to extract sensitive database information from WordPress posts and other tables. CWE-89Jun 1, 2026 | CVSS8.8v4.0 | EPSS0.341% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |