Advisories · Technology
vinod-dalvi Ivory Search – WordPress Search Plugin.
Every CVE that names vinod-dalvi Ivory Search – WordPress Search Plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
Ivory Search <= 5.5.18 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter
- vinod-dalvi Ivory Search – WordPress Search Plugin
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
Ivory Search <= 5.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings
- vinod-dalvi Ivory Search – WordPress Search Plugin
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
Ivory Search <= 5.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' Parameters
- vinod-dalvi Ivory Search – WordPress Search Plugin
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Ivory Search – WordPress Search Plugin <= 5.5.6 - Information Exposure via AJAX Search Form
- vinod-dalvi Ivory Search – WordPress Search Plugin
- Information disclosure
- CVSS 4.3 Medium
Ivory Search – WordPress Search Plugin <= 5.5.5 - Missing Authorization to Authenticated (Subscriber+) Index Creation
- vinod-dalvi Ivory Search – WordPress Search Plugin
- Broken access control