Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: ajay Component: Better Search Clear all filters
TI-2024-19315 CVE-2024-29142 · GHSA-33ph-75g4-888g

WordPress Better Search plugin <= 3.3.0 - Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebberZone Better Search – Relevant search results for WordPress allows Stored XSS.This issue affects Better Search –…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-03-19 No fix listed CWE-79
TI-2021-03257 CVE-2021-4400 · GHSA-mr8q-4p26-5g2p

Better Search <= 2.5.2 - Cross-Site Request Forgery Bypass

Priority LOW 20

The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0039 Published 2023-07-01 No fix listed CWE-352