Plugin icon

Ajax Search Lite – Live Search & Filter

ajax-search-lite

Vulnerabilities:

12

Last Updated:

August 21, 2026

Active Installs:

80000

Published
Title
Fixed in
CVSS
Published
2026-08-04
Title
Ajax Search Lite – Live Search & Filter < 4.14.5 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 4.14.5
CVSS
8.1 (high)
Published
2026-08-03
Title
Ajax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint
Fixed in
Fixed in 4.14.5
CVSS
8.1 (high)
Published
2025-10-21
Title
Ajax Search Lite < 4.13.4 - Authenticated (Administrator+) PHP Object Injection
Fixed in
Fixed in 4.13.4
CVSS
6.6 (medium)
Published
2025-08-27
Title
Ajax Search Lite < 4.13.2 - Missing Authorization to Unauthenticated Basic Information Exposure via ASL_Query in AJAX Search Handler
Fixed in
Fixed in 4.13.2
CVSS
5.3 (medium)
Published
2025-01-31
Title
Ajax Search Lite < 4.12.5 - Admin+ Stored XSS
Fixed in
Fixed in 4.12.5
CVSS
3.5 (low)
Published
2024-11-21
Title
Ajax Search Lite < 4.12.4 - Admin+ Stored XSS
Fixed in
Fixed in 4.12.4
CVSS
3.5 (low)
Published
2024-08-02
Title
Ajax Search Lite <= 4.12.2 - Admin+ Stored XSS
Fixed in
Fixed in 4.12.3
CVSS
3.5 (low)
Published
2024-07-16
Title
Ajax Search Lite < 4.12.1 - Admin+ Stored XSS
Fixed in
Fixed in 4.12.1
CVSS
3.5 (low)
Published
2024-01-04
Title
Ajax Search Lite < 4.11.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.11.5
CVSS
7.1 (high)
Published
2023-04-03
Title
Ajax Search Lite < 4.11.1, Pro < 4.26.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.11.1
CVSS
7.5 (high)
Published
2023-02-06
Title
Ajax Search Lite < 4.11.1 - Subscriber+ Sensitive Data Disclosure
Fixed in
Fixed in 4.11.1
CVSS
4.3 (medium)
Published
2015-03-18
Title
Ajax Search Lite < 3.11 - Authenticated RCE
Fixed in
Fixed in 3.11
CVSS
n/a