Plugin icon

Ivory Search – WordPress Search Plugin

add-search-to-menu

Vulnerabilities:

13

Last Updated:

January 22, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-01-27
Title
Ivory Search < 5.5.14 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' Parameters
Fixed in
Fixed in 5.5.14
CVSS
4.4 (medium)
Published
2025-09-28
Title
Ivory Search < 5.5.13 - Missing Authorization
Fixed in
Fixed in 5.5.13
CVSS
5.3 (medium)
Published
2025-05-27
Title
Ivory Search < 5.5.10 - Admin+ Stored XSS
Fixed in
Fixed in 5.5.10
CVSS
3.5 (low)
Published
2024-09-04
Title
Ivory Search – WordPress Search Plugin < 5.5.7 - Information Exposure via AJAX Search Form
Fixed in
Fixed in 5.5.7
CVSS
5.3 (medium)
Published
2024-04-12
Title
Ivory Search – WordPress Search Plugin < 5.5.6 - Subscriber+ Index Creation
Fixed in
Fixed in 5.5.6
CVSS
4.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.5.2
CVSS
6.1 (medium)
Published
2022-07-04
Title
Ivory Search < 5.4.7 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.4.7
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 5.4.4
CVSS
4.3 (medium)
Published
2022-01-10
Title
Ivory Search < 5.4.1 - Multiple Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 5.4.1
CVSS
3.4 (low)
Published
2021-11-02
Title
Ivory Search < 4.8 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 4.8
CVSS
6.8 (medium)
Published
2021-10-01
Title
Ivory Search < 4.7 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.7
CVSS
8.8 (high)
Published
2021-03-30
Title
Ivory Search < 4.6.1 - Reflected Cross Site Scripting (XSS)
Fixed in
Fixed in 4.6.1
CVSS
5.8 (medium)
Published
2021-02-01
Title
Ivory Search < 4.5.11 - Authenticated Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.5.11
CVSS
6.1 (medium)