Ajax Search Lite <= 4.14.6 - Unauthenticated Sensitive Information Exposure via Password-Protected Post Images

ID

WPSEC-2026-1350

Plugin

Ajax Search Lite – Live Search & Filter (ajax-search-lite)

Affected

all versions before 4.14.7

Remediation

Update to 4.14.7 or later.

CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness

CWE-200

Usage

Plugin High · Affected versions High among sites WPSec scans, 2026-10-21

Attack surface

Ajax Search Lite on WPSec AttackSurface

Fix released

2026-10-19

Published

2026-10-21

Description

The Ajax Search Lite plugin for WordPress is vulnerable to Sensitive Information Exposure via search result images in all versions up to, and including, 4.14.6, due to the result image parser still reading the body of password-protected posts from the database, even though their content and excerpt are blanked in search results. When password-protected posts are included in search and the post content or excerpt is a result image source, this makes it possible for unauthenticated attackers to get the URL of images embedded in password-protected posts they do not have the password for.

References

• https://wpsec.com/vuln/WPSEC-2026-1350/
• https://plugins.svn.wordpress.org/ajax-search-lite/tags/4.14.7/
• https://wordpress.org/plugins/ajax-search-lite/

Published by WPSec. Provided as is, without warranty. Corrections: contact us.

This advisory as JSON or Markdown · All advisories: JSON, RSS