Add Search To Menu Vulnerabilities

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings in all versions up to, and including, 5.5.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, w...

CVSS:

4.4

Affected:

up to 5.5.15

Fixed in:

5.5.16

Disclosed:

Jun 26, 2026

CVE-2026-11356 on NVD →

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can succe...

CVSS:

6.1

Affected:

up to 5.5.8

Fixed in:

5.5.9

Disclosed:

Apr 30, 2026

CVE-2024-13362 on NVD →

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.5.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permission...

CVSS:

4.4

Affected:

up to 5.5.13

Fixed in:

5.5.14

Disclosed:

Jan 27, 2026

CVE-2026-1053 on NVD →

[en] Missing Authorization vulnerability in Vinod Dalvi Ivory Search add-search-to-menu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ivory Search: from n/a through <= 5.5.12.

Affected:

up to 5.5.12

Fix:

No patched version reported

Disclosed:

Dec 9, 2025

CVE-2025-63069 on NVD →

The Ivory Search plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 5.5.12. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 5.5.12

Fixed in:

5.5.13

Disclosed:

Sep 28, 2025

CVE-2025-63069 on NVD →

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.5.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions...

CVSS:

4.4

Affected:

up to 5.5.9

Fixed in:

5.5.10

Disclosed:

May 27, 2025

CVE-2025-5209 on NVD →

[en] The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4....

Affected:

up to 5.4.4

Fixed in:

5.4.4

Disclosed:

Oct 16, 2024

CVE-2022-4974 on NVD →

[en] The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.5.6 via the ajax_load_posts function. This makes it possible for unauthenticated attackers to extract text data from password-protected posts using the boolean-based attack...

Affected:

up to 5.5.7

Fixed in:

5.5.7

Disclosed:

Sep 5, 2024

CVE-2024-6835 on NVD →

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.5.6 via the ajax_load_posts function. This makes it possible for unauthenticated attackers to extract text data from password-protected posts using the boolean-based attack on th...

CVSS:

5.3

Affected:

up to 5.5.6

Fixed in:

5.5.7

Disclosed:

Sep 4, 2024

CVE-2024-6835 on NVD →

[en] The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_create_index() function in all versions up to, and including, 5.5.5. This makes it possible for authenticated attackers, with subscriber-level access and...

Affected:

up to 5.5.6

Fixed in:

5.5.6

Disclosed:

May 2, 2024

CVE-2024-3233 on NVD →

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_create_index() function in all versions up to, and including, 5.5.5. This makes it possible for authenticated attackers, with subscriber-level access and above...

CVSS:

4.3

Affected:

up to 5.5.5

Fixed in:

5.5.6

Disclosed:

Apr 12, 2024

CVE-2024-3233 on NVD →

The Freemius SDK for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘fs_request_get’ function in versions up to, and including, 2.5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute...

CVSS:

6.1

Affected:

4.0 – 5.5.1

Fixed in:

5.5.2

Disclosed:

Jul 18, 2023

CVE-2023-33999 on NVD →

The Ivory Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via an unknown parameter in versions up to, and including, 5.4.6 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts in pages that execute if they can succe...

CVSS:

6.1

Affected:

up to 5.4.6

Fixed in:

5.4.7

Disclosed:

Jul 4, 2022

The Ivory Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via an unknown parameter in versions up to, and including, 5.4.6 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts in pages that execute if they can succe...

Affected:

up to 5.4.7

Fixed in:

5.4.7

Disclosed:

Jul 4, 2022

Reflected Cross-Site Scripting (XSS) vulnerability discovered by WPScanTeam in WordPress Ivory Search plugin (versions <= 5.4.6). Update the WordPress Ivory Search plugin to the latest available version (at least 5.4.7).

Affected:

up to 5.4.7

Fixed in:

5.4.7

Disclosed:

Jul 4, 2022

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. An...

CVSS:

6.3

Affected:

up to 5.4.4

Fixed in:

5.4.4

Disclosed:

Mar 4, 2022

CVE-2022-4974 on NVD →

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. An...

Affected:

up to 5.4.4

Fixed in:

5.4.4

Disclosed:

Mar 4, 2022

Sensitive Information Disclosure vulnerability discovered in WordPress Ivory Search plugin (versions < 5.4.4).

Affected:

up to 5.4.4

Fixed in:

5.4.4

Disclosed:

Feb 28, 2022

Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability discovered in WordPress Ivory Search plugin (versions < 5.4.4).

Affected:

up to 5.4.4

Fixed in:

5.4.4

Disclosed:

Feb 28, 2022

[en] The Ivory Search WordPress plugin before 5.4.1 does not escape some of the Form settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Affected:

up to 5.4.4

Fixed in:

5.4.4

Disclosed:

Feb 7, 2022

CVE-2021-25105 on NVD →

The Ivory Search WordPress plugin before 5.4.1 does not escape some of the Form settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

CVSS:

4.8

Affected:

up to 5.4

Fixed in:

5.4.1

Disclosed:

Jan 10, 2022

CVE-2021-25105 on NVD →

The Ivory Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in versions up to, and including, 4.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated Contributor+ attackers to inject arbitrary web scripts in pages that will...

CVSS:

6.4

Affected:

up to 4.7.1

Fixed in:

4.8

Disclosed:

Nov 2, 2021

The Ivory Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in versions up to, and including, 4.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated Contributor+ attackers to inject arbitrary web scripts in pages that will...

Affected:

up to 4.8

Fixed in:

4.8

Disclosed:

Nov 2, 2021

Authenticated Persistent Cross-Site Scripting (XSS) vulnerability discovered in WordPress Ivory Search plugin (versions <= 4.7).

Affected:

up to 4.7.1

Fixed in:

4.7.1

Disclosed:

Nov 2, 2021

[en] Reflected Cross-Site Scripting (XSS) vulnerability in WordPress Ivory Search plugin (versions <= 4.6.6). Vulnerable parameter: &post.

Affected:

up to 5.4.4

Fixed in:

5.4.4

Disclosed:

Oct 21, 2021

CVE-2021-36869 on NVD →

Reflected Cross-Site Scripting (XSS) vulnerability in WordPress Ivory Search plugin (versions <= 4.6.6). Vulnerable parameter: &post.

CVSS:

6.1

Affected:

up to 4.6.6

Fixed in:

4.7

Disclosed:

Oct 1, 2021

CVE-2021-36869 on NVD →

[en] The Search Forms page of the Ivory Search WordPress lugin before 4.6.1 did not properly sanitise the tab parameter before output it in the page, leading to a reflected Cross-Site Scripting issue when opening a malicious crafted link as a high privilege user. Knowledge of a form id is required to conduct the attack...

Affected:

up to 4.6.1

Fixed in:

4.6.1

Disclosed:

Apr 22, 2021

CVE-2021-24234 on NVD →

The Search Forms page of the Ivory Search WordPress lugin before 4.6.1 did not properly sanitise the tab parameter before output it in the page, leading to a reflected Cross-Site Scripting issue when opening a malicious crafted link as a high privilege user. Knowledge of a form id is required to conduct the attack.

CVSS:

6.1

Affected:

up to 4.6

Fixed in:

4.6.1

Disclosed:

Mar 30, 2021

CVE-2021-24234 on NVD →

The "Ivory Search – WordPress Search Plugin" plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘post’ parameter in versions up to, and including, 4.5.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scrip...

CVSS:

6.1

Affected:

up to 4.5.10

Fixed in:

4.5.11

Disclosed:

Feb 1, 2021

The "Ivory Search – WordPress Search Plugin" plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘post’ parameter in versions up to, and including, 4.5.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scrip...

Affected:

up to 4.5.11

Fixed in:

4.5.11

Disclosed:

Feb 1, 2021

Cross-Site Scripting (XSS) vulnerability found by Nguyen Anh Tien in WordPress Ivory Search plugin (versions <= 4.5.10).

Affected:

up to 4.5.11

Fixed in:

4.5.11

Disclosed:

Feb 1, 2021

The plugin does not escape some URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting

Affected:

up to 5.4.7

Fixed in:

5.4.7

The plugin dos not escape the id argument of its shortcode, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks

Affected:

up to 4.8

Fixed in:

4.8

The setting page of Ivory Search 4.5.10 is vulnerable to reflected XSS when a logged in administrator visit a malicious link or page, as it does not sanitise or escape the GET post parameter before outputting it in a tag attribute

Affected:

up to 4.5.11

Fixed in:

4.5.11

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Affected:

up to 5.5.2

Fixed in:

5.5.2

CVE-2023-33999 on NVD →

Affected:

up to 5.5.10

Fixed in:

5.5.10

CVE-2025-5209 on NVD →