Basic Information Exposure in Ajax Search Lite Plugin for WordPress

CVE-2025-7956

What is CVE-2025-7956?

The Ajax Search Lite plugin for WordPress is susceptible to Basic Information Exposure due to a lack of proper authorization in its AJAX search handler. This vulnerability affects all versions up to and including 4.13.1. As a result, unauthenticated attackers can exploit this weakness by sending repeated AJAX requests, potentially exposing the content of protected posts in segments of 100-character windows, thus compromising the confidentiality of sensitive information.

References