Read the docs

Ivory Search

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ivory Search records in CISA KEV

No Ivory Search vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ivory Search 5 records MEDIUM

Records

5 records

TI-2025-04675 CVE-2025-5209 · GHSA-5j6c-8mh7-5662

Ivory Search < 5.5.10 - Admin+ Stored XSS

Priority MEDIUM 55

The Ivory Search WordPress plugin before 5.5.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00256 Published 2025-06-17 Fixed in 5.5.10 CWE-79
TI-2021-06526 CVE-2021-24234 · GHSA-6g4w-5pr9-j65h

Ivory Search < 4.6.1 - Reflected Cross Site Scripting (XSS)

Priority LOW 30

The Search Forms page of the Ivory Search WordPress lugin before 4.6.1 did not properly sanitise the tab parameter before output it in the page, leading to a reflected Cross-Site Scripting issue when opening a malicious…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01173 Published 2021-04-22 Fixed in 4.6.1 CWE-79
TI-2021-07383 CVE-2021-25105 · GHSA-mr9w-hm8q-hjg9

Ivory Search < 5.4.1 - Multiple Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Ivory Search WordPress plugin before 5.4.1 does not escape some of the Form settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallo…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-02-07 Fixed in 5.4.1 CWE-79
Open these records in search →