WordPress Plugin Vulnerabilities

Search Everything 8.1.0 - options.php Unspecified CSRF

Description

The Search Everything WordPress plugin was affected by an options.php Unspecified CSRF security vulnerability.

Affects Plugins

Plugin icon
search-everything
Fixed in 8.1.1

References

CVE
CVE-2014-3843

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
07b4ad24-abf0-4d59-9ca0-a36590e97015

Timeline

Publicly Published
2014-05-06 (about 12 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-10-17
Title
Freesoul Deactivate Plugins < 2.1.4 - Cross-Site Request Forgery via eos_dp_pro_delete_transient
Published
2025-09-05
Title
TrustMate.io – WooCommerce integration <= 1.16.0 - Cross-Site Request Forgery
Published
2024-03-13
Title
Automatic < 3.92.1 - Cross-Site Request Forgery to Privilege Escalation
Published
2025-03-11
Title
Domain Theme <= 1.3 - Cross-Site Request Forgery
Published
2022-01-05
Title
SupportCandy < 2.2.7 - CSRF to Cross-Site Scripting