Description
WordPress Plugin Ajax Search Lite is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently insert a new user with administrative privileges. WordPress Plugin Ajax Search Lite version 3.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.11 or latest
References
Related Vulnerabilities
Moodle Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-5542)
WordPress Plugin Injectscr Spam Injection (All)
WordPress Plugin Gravity Forms Cross-Site Scripting (2.0.6.5)
TYPO3 Exposed Dangerous Method or Function Vulnerability (CVE-2024-55921)
WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Scripting (3.4.8.2)