Known vulnerabilities in the Ajax Search Lite plugin
8 security advisories have been published for the Ajax Search Lite plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Ajax Search Lite - Remote Code Execution (CVE-2026-16258) CRITICAL
- Ajax Search Lite - PHP Object Injection (CVE-2026-28139) CRITICAL
- Ajax Search Lite - Broken Access Control (CVE-2025-7956) MEDIUM
- Ajax Search Lite - Cross-Site Scripting (XSS) (CVE-2024-8619) MEDIUM
- Ajax Search Lite - Cross-Site Scripting (XSS) (CVE-2024-13585) LOW
- Ajax Search Lite - Cross-Site Scripting (XSS) (CVE-2024-10568) MEDIUM
- Ajax Search Lite - Cross-Site Scripting (XSS) (CVE-2024-7084) MEDIUM
- Ajax Search Lite - Cross-Site Scripting (XSS) (CVE-2023-1420) MEDIUM