FiboSearch – Ajax Search for WooCommerce

FiboSearch – Ajax Search for WooCommerce has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 10 are fixed as of October 2026. Their average CVSS score is 5.6, and the most serious one scores 6.4 out of 10. 2026 was the busiest year with 5 disclosures.

The most common weakness is Cross-Site Scripting, behind 7 of the records (70%). Other recurring categories include Missing Authorization, Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 10 issues recorded for FiboSearch – Ajax Search for WooCommerce has a vendor fix available, so running the current release closes all known holes.

9 independent researchers contributed these findings, one record each. FiboSearch – Ajax Search for WooCommerce is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
5.6/ 10
Patch Coverage100%
Open

0

Fixed

10

Get automatic notifications for all FiboSearch – Ajax Search for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-100106

FiboSearch <= 1.34.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'purchased_plan' Parameter

Read the full analysis

Vulnerability Records

10 records
2026-10-15 18:46CVE-2026-100106
6.4
Medium
darooYes
2026-10-02 07:48CVE-2026-96553
6.1
Medium
neurotxYes
2026-08-25 00:00CVE-2026-16612
5.3
Medium
Duy TranYes
2026-08-05 00:00CVE-2026-28179
4.4
Medium
Ananda DhakalYes
2026-01-07 00:00CVE-2025-47444
5.3
Medium
PPzzAArrYes
2025-12-19 19:45CVE-2025-14298
5.4
Medium
zaimYes
2023-07-18 00:00CVE-2023-33999
6.1
Medium
Rafie MuhammadYes
2023-06-08 00:00CVE-2023-2450
4.4
Medium
Ivan KuzymchakYes
2022-05-16 00:00CVE-2022-1469
6.1
Medium
Dipak Panchal (th3.d1p4k)Yes
2022-03-04 00:00CVE-2022-4974
6.3
Medium
AnonymousYes
Showing 1–10 of 10 reports
FiboSearch – Ajax Search for WooCommerce banner
Latestv1.34.3

FiboSearch – Ajax Search for WooCommerce

Damian Góra

Author

Damian Góra

4.9(1,815)
98/100
Last Updated
2026-10-08 (20d ago)
Active Installs
100,000+
Downloads
4,285,844
Requires WP
6.5+
Requires PHP
7.4+
Tested up to
WP 7.1.3
Created
2016-05-17 (11y ago)
Requires Plugins
woocommerce

The most popular WooCommerce product search plugin. It gives your users a well-designed advanced AJAX search bar with live search suggestions. By default, WooCommerce provides a very simple search solution, without live product search or even SKU search. FiboSearch (formerly Ajax Search for WooCommerce) provides advanced search with live suggestions. Who doesn’t love instant, as-you-type suggestions? In 2025, customers expect smart product search. Baymard Institute’s latest UX research reveals that search autocomplete, auto-suggest, or an instant search feature is now offered on 96% of major e-commerce sites. It’s a must-have feature for every online business that can’t afford to lose customers. Why? FiboSearch helps users save time and makes shopping easier. As a result, Fibo really boosts sales. Features ✅ Search by product title, long and short description ✅ Search by SKU ✅ Show product image in live search results ✅ Show product price in live search results ✅ Show product description in live search results ✅ Show SKU in live search results ✅ Mobile first – special mobile search mode for better UX ✅ Details panels with extended information – “add to cart” button with a quantity field and extended product data displayed on hovering over the live suggestion ✅ Easy implementation in your theme – embed the plugin using a shortcode, as a menu item or as a widget ✅ Terms search – search for product categories and tags ✅ Search history – the current search history is presented when the user clicked/taped on the search bar, but hasn’t yet typed the query. ✅ Limit displayed suggestions – the number is customizable ✅ The minimum number of characters required to display suggestions – the number is customizable ✅ Better ordering – a smart algorithm ensures that the displayed results are as accurate as possible ✅ Support for WooCommerce search results page – after typing enter, users get the same results as in FiboSearch bar ✅ Grouping instant search results by type – displaying e.g. first matching categories, then matching products ✅ Google Analytics support ✅ Multilingual support including WPML, Polylang and qTranslate-XT ✅ Personalization of search bar and autocomplete suggestions – labels, colors, preloader, image and more Try the PRO version FiboSearch also comes in a Pro version, with a modern, inverted index-based search engine. FiboSearch Pro works up to 10× faster than the Free version or other popular search solutions for WooCommerce. Upgrade to PRO and boost your sales! PRO features ✅ Ultra-fast search engine based on the inverted index – works very fast, even with 100,000+ products ✅ Fuzzy search – works even with minor typos ✅ Search in custom fields with dedicated support for ACF ✅ Search in attributes ✅ Search in categories. Supports category thumbnails. ✅ Search in tags ✅ Search in brands (We support WooCommerce Brands, Perfect Brands for WooCommerce, Brands for WooCommerce, YITH WooCommerce Brands). Supports brand thumbnails. ✅ Search by variation product SKU – also shows variable products in live search after typing in the exact matching SKU ✅ Search for posts – also shows matching posts in live search ✅ Search for pages – also shows matching posts in live search ✅ Synonyms ✅ Conditional exclusion of products ✅ TranslatePress compatible ✅ Professional and fast help with embedding or replacing the search bar in your theme ✅ and more… ✅ SEE ALL PRO FEATURES! Showcase See how it works for others: Showcase. Feedback Any suggestions or comments are welcome. Feel free to contact us via the contact form.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C