Vulnerabilities

TI-2014-03121 CVE-2014-3843 · GHSA-wgh3-j8gx-ww4f

Cross-site request forgery (CSRF) vulnerability in the Search Everything plugin before…

LOW 32

Cross-site request forgery (CSRF) vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00952 Published 2014-05-22 No fix listed CWE-352

TI-2014-01835 CVE-2014-2316 · GHSA-6485-6vxr-f5v8

SQL injection vulnerability in se_search_default in the Search Everything plugin before…

LOW 37

SQL injection vulnerability in se_search_default in the Search Everything plugin before 7.0.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the s parameter to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0217 Published 2014-03-07 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in the Search Everything plugin before…

SQL injection vulnerability in se_search_default in the Search Everything plugin before…