A high-severity vulnerability in the Ajax Search Lite plugin allows blind SQL injection, affecting all versions up to 4.14.6 according to the National Vulnerability Database.
A high-severity vulnerability in the popular Ajax Search Pro plugin allows blind SQL injection, affecting versions up to 4.29.1 with no confirmed patch yet.