CVE-2026-16258 Ajax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint

The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent the deserialization of untrusted input, allowing unauthenticated attackers to perform PHP Object Injection. When a suitable POP chain is present via another installed Ajax Search Lite WordPress plugin before 4.14.5 or , this can...

CVE-2026-16258

CVE-2026-16258 : The Ajax Search Lite WordPress plugin prior to 4.14.5 is vulnerable to deserialization of untrusted input, enabling unauthenticated PHP Object Injection. When a suitable POP chain is present via another installed Ajax Search Lite plugin before 4.14.5, this can be leveraged to ach...

EUVD-2026-54389

The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent the deserialization of untrusted input, allowing unauthenticated attackers to perform PHP Object Injection. When a suitable POP chain is present via another installed Ajax Search Lite WordPress plugin before 4.14.5 or , this can...

CVE-2026-65579

Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...

CVE-2026-65581

Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...

CVE-2026-65575

Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...

CVE-2026-65576

Unauthenticated PHP Object Injection in Adrena = 1.2.14 versions...

CVE-2026-65577

Unauthenticated PHP Object Injection in Advice = 1.18.0 versions...

CVE-2026-65578

Unauthenticated PHP Object Injection in Agora = 1.9 versions...

CVE-2026-65571

Unauthenticated PHP Object Injection in 69 Clothing = 1.2.11.1 versions...

CVE-2026-65572

Unauthenticated PHP Object Injection in A.Williams = 1.3.1 versions...

CVE-2026-65573

Unauthenticated PHP Object Injection in Abelle = 1.22 versions...

CVE-2026-65574

Unauthenticated PHP Object Injection in Abogado = 1.18 versions...

CVE-2026-65556

Unauthenticated PHP Object Injection in WPBruiser no- Captcha anti-Spam = 3.1.43 versions...

CVE-2026-65552

Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...

CVE-2026-65549

Author PHP Object Injection in Jeg Kit for Elementor = 3.2.10 versions...

CVE-2026-28139

Unauthenticated PHP Object Injection in Ajax Search Lite = 4.14.4 versions...

EUVD-2026-53879

Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...

CVE-2026-65581

Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...

CVE-2026-65581 WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...