WPdreams

Products

Product	CVEs	Exploited	Latest
Ajax Search Lite	4	–	Oct 21, 2026
Related Posts Lite	2	–	Oct 18, 2025
Ajax Search Lite – Live Search & Filter	1	–	Aug 28, 2025
Ajax Search Pro	1	–	Oct 9, 2026

CVE-2026-111852 Critical 9.3 WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability 0.3%
CVE-2026-110360 Medium 5.3 WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerability 0.2%
CVE-2026-96331 Critical 9.3 WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerability 0.2%
CVE-2026-28139 Critical 9.8 WordPress Ajax Search Lite plugin <= 4.14.4 - PHP Object Injection vulnerability 0.6%
CVE-2025-48086 Medium 5.5 WordPress Ajax Search Lite plugin <= 4.13.3 - PHP Object Injection vulnerability 0.3%
CVE-2025-11926 Medium 4.4 Related Posts Lite <= 1.12 - Authenticated (Admin+) Stored Cross-Site Scripting 0.3%
CVE-2025-9618 Medium 4.3 Related Posts Lite <= 1.12 - Cross-Site Request Forgery 0.1%
CVE-2025-7956 Medium 5.3 Ajax Search Lite <= 4.13.1 - Missing Authorization to Unauthenticated Basic Information Exposure via ASL_Query in AJAX Search Handler 0.3%