Description
WordPress Plugin SearchWP Live Ajax Search is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin SearchWP Live Ajax Search version 1.6.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.6.3 or latest
References
https://www.wordfence.com/vulnerability-advisories/#CVE-2022-3227
https://plugins.svn.wordpress.org/searchwp-live-ajax-search/trunk/readme.txt
Related Vulnerabilities
Drupal Core Security Bypass (8.0.0 - 9.2.21)
WordPress Plugin WP Sudoku Plus Unspecified Vulnerability (1.4)
WordPress Plugin eCommerce Product Catalog for WordPress Cross-Site Request Forgery (3.0.17)
WordPress Plugin PickPlugins Product Slider for WooCommerce Cross-Site Scripting (1.13.21)
WordPress Plugin Responsive Image Slider, Photo Gallery And Carousel Security Bypass (1.3.5)