WordPress Plugin Vulnerabilities

Search Everything < 8.1.7 - SQL Injection

Description

The Search Everything WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
search-everything
Fixed in 8.1.7

References

CVE
CVE-2017-18571

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
9.8 (critical)

Miscellaneous

Verified
No
WPVDB ID
723d70df-cb0f-4c5a-a887-af2b35529ea3

Timeline

Publicly Published
2017-03-20 (about 9 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-01-27
Title
Themes Coder < 1.4.0 - Unauthenticated SQLi
Published
2025-06-14
Title
SMS < 7.0 - Authenticated (Administrator+) SQL Injection
Published
2025-02-12
Title
LTL Freight Quotes – FreightQuote Edition < 2.3.12 - Unauthenticated SQL Injection
Published
2023-10-31
Title
RSVPMarker < 9.9.4 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2025-09-09
Title
PagBank / PagSeguro Connect para WooCommerce < 4.44.4 - Authenticated (Shop Manager+) SQL Injection