Ajax Search Lite – Live Search & Filter

Vulnerabilities 14Slug ajax-search-liteLatest version 4.13.5WordPress.org →

Minimum safe version

4.13.4

Update to 4.13.4 or later to address 14 fixable vulnerabilities

Latest available4.13.5 ✓

Medium 5.3

2025-08-28< 4.13.2

Ajax Search Lite <= 4.13.1 - Missing Authorization to Unauthenticated Basic Information Exposure via ASL_Query in AJAX Search Handler

EUVD Wordfence CVE

Medium 5.5

2025-11-06< 4.13.4

CVE-2025-48086

CVE Wordfence

Low 3.5

2025-02-21< 4.12.5

CVE-2024-13585

CVE EUVD Wordfence

Medium 4.7

2024-12-12< 4.12.4

CVE-2024-10568

CVE Patchstack Wordfence

Medium 4.8

2025-05-15< 4.12.3

Ajax Search Lite <= 4.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

EUVD Wordfence CVE

Medium 4.8

2024-08-06< 4.12.1

CVE-2024-7084

CVE Patchstack Wordfence

High 7.1

2024-02-29< 4.11.5

CVE-2024-21752

CVE Patchstack Wordfence WPScan

Medium 6.1

2023-04-24< 4.11.1

CVE-2023-1420

CVE Patchstack Patchstack Wordfence WPScan

Medium 4.3

2023-03-15< 4.11.1

CVE-2022-38456

CVE Patchstack Wordfence WPScan

N/A

2014-06-24< 3.11

Ajax Search Lite < 3.11 - Remote Code Execution

Wordfence

N/A

2015-03-26< 3.11

Ajax Search Lite < 3.11 - Missing Authorization to Remote Code Execution

Wordfence

N/A

< 3.11

Ajax Search Lite <= 3.1 - Authenticated RCE

WPScan

N/A

2015-03-18< 3.0

WordPress Ajax Search Pro Plugin - Remote Code Execution

Patchstack

N/A

2015-03-18< 3.11

WordPress Ajax Search Lite Plugin <= 3.1 - Remote Code Execution

Patchstack