SearchWP, LLC

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

SearchWP, LLC records in CISA KEV

No SearchWP, LLC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Searchwp 1 record LOW Searchwp Live Ajax Search 1 record LOW

Records

2 records

TI-2022-02342 CVE-2022-2535 · GHSA-v492-qvfp-r274

SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure

LOW 28

The SearchWP Live Ajax Search WordPress plugin before 1.6.2 does not ensure that users making a live search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/d…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02075 Published 2022-08-15 Fixed in 1.6.2 CWE-639

TI-2022-19086 CVE-2022-40223 · GHSA-fqqv-r25w-2p97

WordPress SearchWP premium plugin <= 4.2.5 - Broken Authentication vulnerability

LOW 25

Nonce token leakage and missing authorization in SearchWP premium plugin <= 4.2.5 on WordPress leading to plugin settings change.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00548 Published 2022-11-08 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0