CVE-2026-28139

The vulnerability allows unauthenticated PHP Object Injection in Ajax Search Lite versions up to 4.14.4, potentially enabling attackers to execute arbitrary code on the server. This critical flaw poses a significant risk to any organization utilizing the affected versions of the plugin, as it can lead to complete system compromise. Organizations using Ajax Search Lite should prioritize immediate updates or mitigations to safeguard their systems.