Plugin icon

FiboSearch – Ajax Search for WooCommerce

ajax-search-for-woocommerce

Vulnerabilities:

10

Last Updated:

October 8, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-10-15
Title
FiboSearch < 1.34.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'purchased_plan' Parameter
Fixed in
Fixed in 1.34.3
CVSS
6.4 (medium)
Published
2026-10-02
Title
FiboSearch – Ajax Search for WooCommerce < 1.34.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.34.2
CVSS
6.1 (medium)
Published
2026-08-20
Title
FiboSearch < 1.34.1 - Unauthenticated Password-Protected Product Information Disclosure
Fixed in
Fixed in 1.34.1
CVSS
5.3 (medium)
Published
2026-08-05
Title
FiboSearch – Ajax Search for WooCommerce < 1.34.0 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.34.0
CVSS
4.4 (medium)
Published
2026-01-07
Title
FiboSearch < 1.32.2 - Missing Authorization
Fixed in
Fixed in 1.32.2
CVSS
5.3 (medium)
Published
2025-12-19
Title
FiboSearch – Ajax Search for WooCommerce < 1.32.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via thegem_te_search Shortcode
Fixed in
Fixed in 1.32.1
CVSS
5.4 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.25.0b3
CVSS
6.1 (medium)
Published
2023-06-08
Title
FiboSearch - AJAX Search for WooCommerce < 1.24.0 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.24.0
CVSS
4.4 (medium)
Published
2022-05-16
Title
FiboSearch < 1.18.0 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.18.0
CVSS
3.4 (low)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.17.0
CVSS
4.3 (medium)