WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
search-and-share
Published
2014-08-01
Title
search-&-share <= 0.9.3 - XSS in ZeroClipboard
Slug
search-autocomplete
Published
2011-09-01
Title
SearchAutocomplete <= 1.0.8 - Unauthenticated SQL Injection
Slug
search-cloud-one
Published
2025-09-05
Title
Search Cloud One <= 2.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
search-console
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
search-everything
Published
2014-05-06
Title
Search Everything 8.1.0 - options.php Unspecified CSRF
Slug
search-everything
Published
2014-08-01
Title
Search Everything 7.0.2 - search-everything.php s Parameter SQL Injection
Slug
search-everything
Published
2017-03-20
Title
Search Everything < 8.1.7 - SQL Injection
Slug
search-everything
Published
2016-06-10
Title
Search Everything < 8.1.6 - SQL Injection
Slug
search-exclude
Published
2019-09-07
Title
Search Exclude < 1.2.4 - Arbitrary Settings Change
Slug
search-exclude
Published
2022-08-22
Title
Search Exclude < 1.2.7 - Author+ Stored Cross-Site Scripting
Slug
search-exclude
Published
2025-05-06
Title
Search Exclude < 2.5.0 - Missing Authorization to Unauthenticated Plugin Settings Modification
Slug
search-exclude
Published
2025-11-24
Title
Search Exclude < 2.5.8 – Missing Authorization to Authenticated (Contributor+) Search Settings Modification via REST API
Slug
search-field-for-gravity-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
search-filter
Published
2022-12-27
Title
Search & Filter < 1.2.16 - Contributor+ Stored XSS
Slug
search-filter
Published
2025-10-07
Title
Search & Filter < 1.2.18 - Cross-Site Request Forgery
Slug
search-filter-pro
Published
2024-07-18
Title
Search Filter Pro < 2.5.18 - Admin+ Stored XSS
Slug
search-filter-pro
Published
2025-03-13
Title
Search and filter pro < 2.5.20 - Missing Authorization to Authenticated (Subscriber+) Post Meta Exposure
Slug
search-google
Published
2025-09-05
Title
Search by Google <= 1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
search-logger
Published
2022-09-20
Title
Search Logger <= 0.9 - Admin+ SQLi
Slug
search-meter
Published
2020-03-11
Title
Search Meter < 2.13.3 - CSV Injection
Slug
search-order-by-product-sku-for-woocommerce
Published
2024-11-04
Title
Search order by product SKU for WooCommerce <= 0.2 - Reflected Cross-Site Scripting
Slug
search-with-typesense
Published
2025-02-22
Title
Search with Typesense < 2.0.9 - Authenticated (Admin+) Path Traversal
Slug
search-with-typesense
Published
2025-06-05
Title
Search with Typesense < 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
searchazon
Published
2025-12-30
Title
SearchAzon <= 1.4 - Cross-Site Request Forgery
Slug
searcher-elementor
Published
2025-12-10
Title
Searcher for Elementor <= 1.0.3 - Missing Authorization