Vulnerabilities

TI-2026-21773 CVE-2026-27357 · GHSA-prqp-27gf-5pxp

WordPress WP Search Analytics plugin < 1.5.0 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Cornel Raiu WP Search Analytics allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00231 Published 2026-05-25 Fixed in 1.5.0 CWE-862

TI-2024-28882 CVE-2024-43229 · GHSA-9mfg-cwh5-52p2

WordPress WP Search Analytics plugin <= 1.4.9 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Cornel Raiu WP Search Analytics search-analytics.This issue affects WP Search Analytics: from n/a through <= 1.4.9.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00358 Published 2024-11-01 No fix listed CWE-862

TI-2024-08545 CVE-2024-9209 · GHSA-p726-x3jw-jj27

WP Search Analytics <= 1.4.10 - Reflected Cross-Site Scripting

LOW 27

The WP Search Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.4.10.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00392 Published 2024-10-01 No fix listed CWE-79

TI-2023-14307 CVE-2023-30471 · GHSA-r8cv-83hm-rgq3

WordPress WP Search Analytics Plugin <= 1.4.7 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cornel Raiu WP Search Analytics plugin <= 1.4.7 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00387 Published 2023-09-27 No fix listed CWE-79

TI-2022-23625 CVE-2022-47587 · GHSA-fvc7-4rqw-m8qw

WordPress WP Search Analytics Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)