Extension WordPress
Vulnérabilités Ajax Search Lite – Live Search & Filter
Cette page rassemble les failles publiées pour Ajax Search Lite – Live Search & Filter, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Ajax Search Lite – Live Search & Filter
11 fiches
Ajax Search Lite <= 4.13.3 – Authenticated (Administrator+) PHP Object Injection
The Ajax Search Lite plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.13.3 via deserialization of untrusted input. This makes it possible for authenticated attackers, with administrator-level access and above, to…
*-4.13.3
4.13.4
21/10/2025
Ajax Search Lite <= 4.13.1 – Missing Authorization to Unauthenticated Basic Information Exposure via ASL_Query in AJAX Search Handler
The Ajax Search Lite plugin for WordPress is vulnerable to Basic Information Exposure due to missing authorization in its AJAX search handler in all versions up to, and including, 4.13.1. This makes it possible for unauthenticated attackers to…
*-4.13.1
4.13.2
27/08/2025
Ajax Search Lite <= 4.12.4 – Authenticated (Admin+) Stored Cross-Site Scripting
The Ajax Search Lite – Live Search & Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.12.4 due to insufficient input sanitization and output escaping. This…
*-4.12.4
4.12.5
31/01/2025
Ajax Search Lite <= 4.12.3 – Authenticated (Admin+) Stored Cross-Site Scripting
The Ajax Search Lite – Live Search & Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.12.3 due to insufficient input sanitization and output escaping. This…
*-4.12.3
4.12.4
21/11/2024
Ajax Search Lite <= 4.12.1 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Ajax Search Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.12.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-4.12.1
4.12.2
02/08/2024
Ajax Search Lite < 4.12 – Authenticated (Admin+) Stored Cross-Site Scripting
The Ajax Search Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-4.12
4.12.1
16/07/2024
Ajax Search Lite <= 4.11.4 – Reflected Cross-Site Scripting
The Ajax Search Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.11.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary…
*-4.11.4
4.11.5
04/01/2024
Ajax Search Lite <= 4.11 – Reflected Cross-Site Scripting
The Ajax Search Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary…
*-4.11
4.11.1
03/04/2023
Ajax Search Lite <= 4.10.3 – Missing Authorization leading to Authenticated (Subscriber+) Sensitive Information Disclosure
The Ajax Search Lite plugin for WordPress is vulnerable to Missing Authorization (leading to Sensitive Information Disclosure) in versions up to, and including, 4.10.3 via the 'searchCF' function. This can allow subscriber-level attackers to extract sensitive data including…
*-4.10.3
4.11
06/02/2023
Ajax Search Lite < 3.11 – Missing Authorization to Remote Code Execution
The Ajax Search Lite plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wpdreams_ajaxinputcallback function in versions up to, and including, 3.10. This makes it possible for authenticated attackers, with subscriber-level…
[*, 3.11)
3.11
26/03/2015
Ajax Search Lite < 3.11 – Remote Code Execution
The Ajax Search Lite plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.10 via the TimThumb’s "Webshot" feature. This allows unauthenticated attackers to execute code on the server.
[*, 3.11)
3.11
24/06/2014
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.