SearchWP Live Ajax Search
SearchWP Live Ajax Search has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2022; all 2 are fixed as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 0 high. 2022 was the busiest year with 2 disclosures.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (50%). Other recurring categories include PHP Remote File Inclusion.
Every one of the 2 issues recorded for SearchWP Live Ajax Search has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. SearchWP Live Ajax Search is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2022-3227SearchWP Live Ajax Search <= 1.6.2 - Directory Traversal and Local File Inclusion
Read the full analysisVulnerability Records
SearchWP Live Ajax Search
Author
Syed Balkhi
Does not require SearchWP, but will utilize it if available. Full documentation is available at searchwp.com. SearchWP Live Ajax Search enables AJAX powered live search for your search forms. Designed to be a developer’s best friend, SearchWP Live Ajax Search aims to stay out of your way but at the same time allowing you to customize everything about it. It’s set up to work with any WordPress theme and uses a template loader to display results. The template based approach allows you to seamlessly customize your SearchWP Live Search implementation without messing with dozens of cluttered options. Works best with SearchWP (but SearchWP is not necessary) SearchWP Live Ajax Search is best utilized in conjunction with SearchWP, but it is not required. If SearchWP is installed and activated, SearchWP Live Ajax Search can be customized to use any of your search engines per search form. Customization You can customize the implementation of SearchWP Live Ajax Search to a great degree, including any number of developer-defined configurations. The results are based on a template loader, allowing SearchWP Live Ajax Search to stay out of your way and letting you write the results template as you would any other WordPress theme file. Everything is powered by adding a single HTML5 data attribute (data-swplive="true") to the input field of your search form. This happens automagically out of the box for any search forms generated from get_search_form(). Widget support SearchWP Live Ajax Search ships with a Widget allowing you to insert live search forms wherever you’d like.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C