CVE-2026-16258

The CVE-2026-16258 entry concerns the Ajax Search Lite WordPress plugin (versions prior to 4.14.5). The issue is deserialization of untrusted input in the plugin, allowing unauthenticated attackers to perform PHP Object Injection. If a suitable POP chain exists via another installed Ajax Search L...