← WordPress Vulnerabilities
WordPress security by component

WP AutoSuggest

WP AutoSuggest is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 01, 2026; the highest CVE/CNA score is 8.8.

Plugin slug: wp-autosuggest

CVE-2018-25434: WP AutoSuggest: SQL injection

WP AutoSuggest is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is 0.24.

PublishedJun 01, 2026
Safe version guidanceSee mitigation notes
Safe version
Jun 01, 2026 CVE-2018-25434
WP AutoSuggest: SQL injection
WP AutoSuggest is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is 0.24.
See mitigation notes
CVE8.8
NVDPending