CVE-2024-7084: Wp-Dreams AJAX Search

Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The Ajax Search Lite WordPress plugin before 4.12.1 does not sanitise and escape some parameters, which could allow users with a role as low as Admin+ to perform Cross-Site Scripting attacks.

Affected products

• Wp-Dreams AJAX Search: before 4.12.1 (fixed in 4.12.1)

Published 2024-08-06. Last modified 2026-06-17.