What’s Vulnerable › Products

Ajax Search Lite vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Ajax Search Lite version is affected

Latest Ajax Search Lite vulnerabilities

• CVE-2026-16258 — Ajax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint (CVSS 9.8)
• CVE-2024-8619 — Ajax Search Lite <= 4.12.2 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2024-13585 — Ajax Search Lite < 4.12.5 - Admin+ Stored XSS (CVSS 3.5)
• CVE-2024-10568 — Ajax Search Lite < 4.12.4 - Admin+ Stored XSS (CVSS 4.7)
• CVE-2024-7084 — Ajax Search Lite < 4.12.1 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2024-21752 — WordPress Ajax Search Lite Plugin <= 4.11.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
• CVE-2023-1435 — Ajax Search Lite Pro < 4.26.2 - Multiple Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2023-1420 — Ajax Search Lite < 4.11.1, Pro < 4.26.2 - Reflected Cross-Site Scripting (CVSS 6.1)