CVE-2026-110360: WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ajax Search Lite: from n/a through 4.14.5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/ajax-search-liteto a version that resolves this vulnerability.Fixed in 4.14.6
Event History
Frequently Asked Questions
Who can exploit this issue?
The CVSS vector indicates it can be exploited remotely over the network without privileges or user interaction. The available data does not identify the specific affected action or data exposed.
Which installations are affected?
Ajax Search Lite versions through 4.14.5 are affected. The supplied information does not state whether any particular plugin configuration is required or whether default configurations are vulnerable.
What is the likely impact?
The issue is rated medium severity with a 5.3 CVSS score and is associated with low confidentiality impact. No integrity or availability impact is identified in the provided vector.