Search vulnerabilities

Results 2

Export CSV
CVE-2024-7084

Ajax Search Lite < 4.12.1 - Admin+ Stored XSS

The Ajax Search Lite WordPress plugin before 4.12.1 does not sanitise and escape some parameters, which could allow users with a role as low as Admin+ to perform Cross-Site Scripting attacks.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
CVE-2022-38456

WordPress Ajax Search Lite Plugin <= 4.10.3 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ernest Marcinko Ajax Search Lite plugin <= 4.10.3 versions.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Products