Threats tagged 'ghsa-m7vw-4232-p79x'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.8%	CVE-2026-16258Ajax Search Lite (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.8%2026-08-07CVE Database V5CVE-2026-16258 Ajax Search Lite WordPress plugin versions before 4.14.5 contain a deserialization vulnerability that allows unauthenticated attackers to perform PHP Object Injection. This can lead to remote code execution if a suitable gadget chain is present in the environment. The vulnerability is identified as CWE-502 and has a critical CVSS score of 9.8. EPSS 0.8%Vulnerability CWE-502 #ghsa-m7vw-4232-p79x	CVE Database V5	2026-08-07

Page 1 of 1