Ivory Search – WordPress Search Plugin
add-search-to-menu · plugin
Known security vulnerabilities for Ivory Search – WordPress Search Plugin. Find out in seconds which version runs on your site with WP Lens.
6 known vulnerabilities
latest Jun 26, 2026
Vulnerabilities
- Medium 6.1
WordPress Ivory Search plugin <= 4.6.6 - Reflected Cross-Site Scripting (XSS) vulnerability
- Medium 5.3
WordPress Ivory Search plugin <= 5.5.12 - Broken Access Control vulnerability
- Medium 5.3
Ivory Search – WordPress Search Plugin <= 5.5.6 - Information Exposure via AJAX Search Form
- Medium 4.4
Ivory Search <= 5.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings
- Medium 4.4
Ivory Search <= 5.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' Parameters
- Medium 4.3
Ivory Search – WordPress Search Plugin <= 5.5.5 - Missing Authorization to Authenticated (Subscriber+) Index Creation