WordPress Plugin Vulnerabilities

Search Everything < 8.1.6 - SQL Injection

Description

The Search Everything WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
search-everything
Fixed in 8.1.6

References

CVE
CVE-2016-10917

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
9.8 (critical)

Miscellaneous

Verified
No
WPVDB ID
2f10e690-087f-4699-8ce0-464ba98bec7a

Timeline

Publicly Published
2016-06-10 (about 9 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2019-07-11
Title
FV Flowplayer Video Player < 7.3.19.727 - SQL Injection
Published
2021-08-18
Title
BuddyPress < 9.1.1 - SQL Injections
Published
2025-01-07
Title
eDoc Easy Tables <= 1.29 - Authenticated (Contributor+) SQL Injection
Published
2024-03-28
Title
WP Travel Engine < 5.8.0 - Unauthenticated SQL Injection
Published
2025-07-11
Title
WP-BusinessDirectory < 3.1.5 - Unauthenticated SQL Injection