plugin

Advanced Search By My Solr Server Vulnerabilities

2 known security issues reported for the Advanced Search By My Solr Server WordPress plugin. Most recent disclosed Apr 1, 2025.

1 medium

Running Advanced Search By My Solr Server on your site? Check whether your installed version is affected.

Scan your site free

Advanced Search by My Solr Server <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

medium

The Advanced Search by My Solr Server plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5. This is due to missing or incorrect nonce validation on the 'MySolrServerSettings' page. This makes it possible for unauthenticated attackers to update settings and inject...

CVSS:
6.1
Affected:
up to 2.0.5
Fix:
No patched version reported
Disclosed:
Apr 1, 2025

CVE-2025-3099 on NVD →

Advanced Search by My Solr Server [advanced-search-by-my-solr-server] <= 2.0.5 (unfixed + closed)

unknown
Affected:
up to 2.0.5
Fix:
No patched version reported

CVE-2025-3099 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database