WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
search-everything
Published
2017-03-20
Title
Search Everything < 8.1.7 - SQL Injection
Slug
search-everything
Published
2016-06-10
Title
Search Everything < 8.1.6 - SQL Injection
Slug
search-exclude
Published
2019-09-07
Title
Search Exclude < 1.2.4 - Arbitrary Settings Change
Slug
search-exclude
Published
2022-08-22
Title
Search Exclude < 1.2.7 - Author+ Stored Cross-Site Scripting
Slug
search-exclude
Published
2025-05-06
Title
Search Exclude < 2.5.0 - Missing Authorization to Unauthenticated Plugin Settings Modification
Slug
search-exclude
Published
2025-11-24
Title
Search Exclude < 2.5.8 – Missing Authorization to Authenticated (Contributor+) Search Settings Modification via REST API
Slug
search-field-for-gravity-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
search-filter
Published
2022-12-27
Title
Search & Filter < 1.2.16 - Contributor+ Stored XSS
Slug
search-filter
Published
2025-10-07
Title
Search & Filter < 1.2.18 - Cross-Site Request Forgery
Slug
search-filter-pro
Published
2024-07-18
Title
Search Filter Pro < 2.5.18 - Admin+ Stored XSS
Slug
search-filter-pro
Published
2025-03-13
Title
Search and filter pro < 2.5.20 - Missing Authorization to Authenticated (Subscriber+) Post Meta Exposure
Slug
search-google
Published
2025-09-05
Title
Search by Google <= 1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
search-logger
Published
2022-09-20
Title
Search Logger <= 0.9 - Admin+ SQLi
Slug
search-meter
Published
2020-03-11
Title
Search Meter < 2.13.3 - CSV Injection
Slug
search-order-by-product-sku-for-woocommerce
Published
2024-11-04
Title
Search order by product SKU for WooCommerce <= 0.2 - Reflected Cross-Site Scripting
Slug
search-simple-fields
Published
2026-05-26
Title
Search Simple Fields <= 0.2 - Cross-Site Request Forgery to Plugin Settings Update
Slug
search-with-typesense
Published
2025-02-22
Title
Search with Typesense < 2.0.9 - Authenticated (Admin+) Path Traversal
Slug
search-with-typesense
Published
2025-06-05
Title
Search with Typesense < 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
searchazon
Published
2025-12-30
Title
SearchAzon <= 1.4 - Cross-Site Request Forgery
Slug
searcher-elementor
Published
2025-12-10
Title
Searcher for Elementor <= 1.0.3 - Missing Authorization
Slug
searchie
Published
2025-01-08
Title
Searchie <= 1.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
searchiq
Published
2022-03-28
Title
SearchIQ < 3.9 - Unauthenticated Stored XSS
Slug
searchiq
Published
2023-11-16
Title
SearchIQ < 4.5 - Unauthenticated Sensitive Information Disclosure
Slug
searchiq
Published
2024-04-05
Title
SearchIQ < 4.6 - Unauthenticated Sensitive Information Exposure
Slug
searchiq
Published
2024-12-03
Title
SearchIQ – The Search Solution < 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting