TI-2022-03935 CVE-2022-4297 · GHSA-xcgc-gw57-wr9fWP AutoComplete Search <= 1.0.4 - Unauthenticated SQLiPriority HIGH 82The WP AutoComplete Search WordPress plugin through 1.0.4 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX available to unauthenticated users, leading to an unauthenticated SQL inje…CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03849 · Published 2023-01-02 · No fix listed