Ivory Search – WordPress Search Plugin

Güvenlik açıkları

• CVE-2021-36869

  WordPress Ivory Search plugin <= 4.6.6 - Reflected Cross-Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2025-63069

  WordPress Ivory Search plugin <= 5.5.12 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2024-6835

  Ivory Search – WordPress Search Plugin <= 5.5.6 - Information Exposure via AJAX Search Form

  Orta 5.3

• CVE-2026-11356

  Ivory Search <= 5.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings

  Orta 4.4

• CVE-2026-1053

  Ivory Search <= 5.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' Parameters

  Orta 4.4

• CVE-2024-3233

  Ivory Search – WordPress Search Plugin <= 5.5.5 - Missing Authorization to Authenticated (Subscriber+) Index Creation

  Orta 4.3