What’s Vulnerable › Products
vinod-dalvi Ivory Search – WordPress Search Plugin vulnerabilities
10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your vinod-dalvi Ivory Search – WordPress Search Plugin version is affected
Latest vinod-dalvi Ivory Search – WordPress Search Plugin vulnerabilities
- CVE-2026-92243 — Ivory Search <= 5.5.18 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter (CVSS 6.1)
- CVE-2026-11356 — Ivory Search <= 5.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings (CVSS 4.4)
- CVE-2024-13362 — Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter (CVSS 6.1)
- CVE-2026-1053 — Ivory Search <= 5.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' Parameters (CVSS 4.4)
- CVE-2025-5209 — Ivory Search < 5.5.10 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
- CVE-2024-6835 — Ivory Search – WordPress Search Plugin <= 5.5.6 - Information Exposure via AJAX Search Form (CVSS 5.3)
- CVE-2021-25105 — Ivory Search < 5.4.1 - Multiple Admin+ Stored Cross-Site Scripting (CVSS 4.8)
- CVE-2021-36869 — WordPress Ivory Search plugin <= 4.6.6 - Reflected Cross-Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2021-24234 — Ivory Search < 4.6.1 - Reflected Cross Site Scripting (XSS) (CVSS 6.1)