Skip to contentVinod-dalvi Ivory Search – Wordpress Search Plugin vulnerabilities
- vinod-dalvi ivory search – wordpress search pluginIvory Search <= 5.5.18 - Reflected DOM-Based Cross-Site Scripting via 's' ParameterCVE-2026-922436.1 Medium
- vinod-dalvi ivory search – wordpress search pluginIvory Search <= 5.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' SettingsCVE-2026-113564.4 Medium
- 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 moreFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterCVE-2024-133626.1 Medium
- vinod-dalvi ivory search – wordpress search pluginIvory Search <= 5.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' ParametersCVE-2026-10534.4 Medium
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- ivorysearch ivory search, vinod-dalvi ivory search – wordpress search plugin +1 moreIvory Search – WordPress Search Plugin <= 5.5.6 - Information Exposure via AJAX Search FormCVE-2024-68355.3 Medium
- vinod-dalvi ivory search – wordpress search plugin, ivory search +1 moreIvory Search – WordPress Search Plugin <= 5.5.5 - Missing Authorization to Authenticated (Subscriber+) Index CreationCVE-2024-32334.3 Medium
- ivorysearch ivory search, unknown ivory search – wordpress search plugin +1 moreIvory Search < 5.4.1 - Multiple Admin+ Stored Cross-Site ScriptingCVE-2021-251054.8 Medium
- ivorysearch ivory search, unknown ivory search – wordpress search plugin +1 moreIvory Search < 4.6.1 - Reflected Cross Site Scripting (XSS)CVE-2021-242346.1 Medium