Ajax Search Lite Missing Authorization Vulnerability Allowing Basic Information Exposure

A vulnerability exists in the Ajax Search Lite plugin for WordPress, in all versions through 4.13.1, allowing unauthenticated attackers to access protected post content. This issue arises from a lack of proper authorization in the AJAX search handler, enabling repeated requests that leak information in 100-character increments.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the content of protected posts, allowing attackers to read sensitive information that should remain private.

Remediation

Users can update to version 4.13.2 or a newer patched version to address this vulnerability.