CVE · Critical
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-28139 | Ajax Search Lite – Live Search & Filter [ajax-search-lite] < 4.14.5 | Deserialization of Untrusted Data | Critical 9.8 | < 4.14.5 | 4.14.5 | 2025-10-21 | — |
Unauthenticated attackers can exploit a PHP object injection vulnerability in versions of Ajax Search Lite up to and including 4.14.4, potentially leading to arbitrary code execution on the server.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.