WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
search-field-for-gravity-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
search-filter
Published
2022-12-27
Title
Search & Filter < 1.2.16 - Contributor+ Stored XSS
Slug
search-filter
Published
2025-10-07
Title
Search & Filter < 1.2.18 - Cross-Site Request Forgery
Slug
search-filter-pro
Published
2024-07-18
Title
Search Filter Pro < 2.5.18 - Admin+ Stored XSS
Slug
search-filter-pro
Published
2025-03-13
Title
Search and filter pro < 2.5.20 - Missing Authorization to Authenticated (Subscriber+) Post Meta Exposure
Slug
search-google
Published
2025-09-05
Title
Search by Google <= 1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
search-logger
Published
2022-09-20
Title
Search Logger <= 0.9 - Admin+ SQLi
Slug
search-meter
Published
2020-03-11
Title
Search Meter < 2.13.3 - CSV Injection
Slug
search-order-by-product-sku-for-woocommerce
Published
2024-11-04
Title
Search order by product SKU for WooCommerce <= 0.2 - Reflected Cross-Site Scripting
Slug
search-with-typesense
Published
2025-02-22
Title
Search with Typesense < 2.0.9 - Authenticated (Admin+) Path Traversal
Slug
search-with-typesense
Published
2025-06-05
Title
Search with Typesense < 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
searchie
Published
2025-01-08
Title
Searchie <= 1.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
searchiq
Published
2022-03-28
Title
SearchIQ < 3.9 - Unauthenticated Stored XSS
Slug
searchiq
Published
2023-11-16
Title
SearchIQ < 4.5 - Unauthenticated Sensitive Information Disclosure
Slug
searchiq
Published
2024-04-05
Title
SearchIQ < 4.6 - Unauthenticated Sensitive Information Exposure
Slug
searchiq
Published
2024-12-03
Title
SearchIQ – The Search Solution < 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
searchiq
Published
2024-12-19
Title
SearchIQ < 4.7 - Cross-Site Request Forgery
Slug
searchiq
Published
2025-03-04
Title
SearchIQ – The Search Solution < 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
searchiq
Published
2025-03-27
Title
SearchIQ < 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
searchpro
Published
2024-07-10
Title
BerqWP < 1.7.6 - Unauthenticated Server-Side Request Forgery
Slug
searchpro
Published
2024-08-07
Title
BerqWP < 1.7.7 - Unauthenticated Arbitrary File Uplaod
Slug
searchpro
Published
2024-10-01
Title
BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript < 2.1.2 - Reflected Cross-Site Scripting
Slug
searchpro
Published
2025-07-31
Title
BerqWP < 2.2.44 - Unauthenticated Arbitrary File Upload
Slug
searchpro
Published
2025-09-09
Title
BerqWP < 2.2.54 - Missing Authorization
Slug
searchterms-tagging-2
Published
2015-07-08
Title
SEO SearchTerms Tagging 2 <= 1.535 - XSS & Authenticated SQL Injection