High severity7.2NVD Advisory· Published Apr 14, 2021· Updated Jun 17, 2026
CVE-2021-29654
CVE-2021-29654
Description
AjaxSearchPro before 4.20.8 allows Deserialization of Untrusted Data (in the import database feature of the administration panel), leading to Remote Code execution.
Affected products
3- AjaxSearchPro/AjaxSearchProdescription
- Range: <4.20.8
- Range: <4.20.8
Patches
Vulnerability mechanics
References
1- www.synacktiv.com/sites/default/files/2021-04/WP_AjaxSearchPro_Vulnerability.pdfnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.