Vulnerabilities / Ajax Search Lite
Ajax Search Lite vulnerabilities
Advisories WPSec published for Ajax Search Lite – Live Search & Filter. Other sources may list more. Its attack surface: Ajax Search Lite on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-15 | WPSEC-2026-0996 | Ajax Search Lite <= 4.14.5 - Unauthenticated CSV Injection via Search Statistics Export | Medium 4.2 | 4.14.6 |
| 2026-10-15 | WPSEC-2026-0995 | Ajax Search Lite <= 4.14.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Forged Search Instance Settings | Medium 5.4 | 4.14.6 |
| 2026-10-15 | WPSEC-2026-0994 | Ajax Search Lite <= 4.14.5 - Unauthenticated Sensitive Information Exposure via 'customset' Post Type Selection | Medium 5.3 | 4.14.6 |
| 2026-10-15 | WPSEC-2026-0993 | Ajax Search Lite <= 4.14.5 - Unauthenticated Sensitive Information Exposure of Password Protected Post Content via Search Results | Low 3.7 | 4.14.6 |
License: CC BY 4.0