PLUGIN SECURITY
Is Ajax Search For Woocommerce safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Ajax Search For Woocommerce WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
ajax-search-for-woocommerce - Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
- FiboSearch – Ajax Search for WooCommerce [ajax-search-for-woocommerce] < 1.17.0 [WordPress FiboSearch – Ajax Search for WooCommerce plugin < 1.17.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability]
- FiboSearch – Ajax Search for WooCommerce [ajax-search-for-woocommerce] < 1.17.0 [WordPress FiboSearch – Ajax Search for WooCommerce plugin < 1.17.0 - Sensitive Information Disclosure vulnerability]
- FiboSearch – Ajax Search for WooCommerce [ajax-search-for-woocommerce] < 1.18.0 [CVE-2022-1469, WordPress FiboSearch plugin <= 1.17.0 - Stored Cross-Site Scripting (XSS) vulnerability, FiboSearch < 1.18.0 - Admin+ Stored Cross-Site Scripting, FiboSearch <= 1.17.0 - Authenticated (Admin+) Stored Cross-Site Scripting]
- FiboSearch – Ajax Search for WooCommerce [ajax-search-for-woocommerce] < 1.17.0 [Freemius SDK <= 2.4.2 - Missing Authorization Checks]
- FiboSearch – Ajax Search for WooCommerce [ajax-search-for-woocommerce] < 1.24.0 [CVE-2023-2450, FiboSearch - AJAX Search for WooCommerce <= 1.23.0 - Authenticated (Admin+) Stored Cross-Site Scripting, WordPress FiboSearch – Ajax Search for WooCommerce Plugin <= 1.23.0 is vulnerable to Cross Site Scripting (XSS), FiboSearch - AJAX Search for WooCommerce < 1.24.0 - Admin+ Stored Cross-Site Scripting]
+ 2 more known vulnerabilities
- FiboSearch – Ajax Search for WooCommerce [ajax-search-for-woocommerce] < 1.25.0 [CVE-2023-33999, WordPress FiboSearch – Ajax Search for WooCommerce Plugin < 1.25.0 is vulnerable to Cross Site Scripting (XSS), Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting]
- FiboSearch – Ajax Search for WooCommerce [ajax-search-for-woocommerce] < 1.32.1 [CVE-2025-14298, FiboSearch – Ajax Search for WooCommerce <= 1.32.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via thegem_te_search Shortcode, EUVD-2025-204637]
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- Ivory Search – WordPress Search Plugin — 100000+ active installs — max PHP 8.4
- Relevanssi – A Better Search — 100000+ active installs — max PHP 8.4
- Ajax Search Lite – Live Search & Filter — 80000+ active installs — max PHP 8.4
- Advanced Woo Search – Product Search for WooCommerce — 70000+ active installs — max PHP 8.4
- Themify – WooCommerce Product Filter — 20000+ active installs
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.