Search And Go Vulnerabilities

The Search & Go theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.8. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, o...

CVSS:

8.1

Affected:

up to 2.8

Fix:

No patched version reported

Disclosed:

Jan 12, 2026

CVE-2025-69005 on NVD →

The Search & Go - Directory WordPress Theme theme for WordPress is vulnerable to Authentication Bypass via account takeover in all versions up to, and including, 2.7. This is due to insufficient user validation in the search_and_go_elated_check_facebook_user() function This makes it possible for unauthenticated attacke...

CVSS:

9.8

Affected:

up to 2.7

Fixed in:

2.8

Disclosed:

Oct 8, 2025

CVE-2025-11522 on NVD →