Vulnerabilities

TI-2025-22137 CVE-2025-30867 · GHSA-7fxg-279r-rhqq

WordPress SearchIQ plugin <= 4.7 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SearchIQ SearchIQ searchiq allows Stored XSS.This issue affects SearchIQ: from n/a through <= 4.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00374 Published 2025-03-27 No fix listed CWE-79

TI-2024-12392 CVE-2024-13350 · GHSA-pw2f-j76p-vrqv

SearchIQ – The Search Solution <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The SearchIQ – The Search Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'siq_searchbox' shortcode in all versions up to, and including, 4.7 due to insufficient input sanitiza…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00241 Published 2025-03-05 No fix listed CWE-79

TI-2024-37199 CVE-2024-56229 · GHSA-vr96-c7gf-6gvh

WordPress SearchIQ plugin <= 4.6 - Cross-Site Requst Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in SearchIQ SearchIQ searchiq.This issue affects SearchIQ: from n/a through <= 4.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00172 Published 2024-12-31 No fix listed CWE-352

TI-2023-25940 CVE-2023-47832 · GHSA-g4mp-v546-gp2c

WordPress SearchIQ plugin <= 4.4 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in SearchIQ SearchIQ searchiq allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SearchIQ: from n/a through <= 4.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0042 Published 2024-12-09 No fix listed CWE-862

TI-2024-10091 CVE-2024-10885 · GHSA-v5rj-qw4c-6pc2

SearchIQ – The Search Solution <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The SearchIQ – The Search Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'siq_searchbox' shortcode in all versions up to, and including, 4.6 due to insufficient input sanitiza…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00296 Published 2024-12-04 No fix listed CWE-79

TI-2024-20635 CVE-2024-31259 · GHSA-pj43-gpqr-fhm8

WordPress SearchIQ plugin <= 4.5 - Sensitive Data Exposure via Log File vulnerability

MEDIUM 40

Insertion of Sensitive Information into Log File vulnerability in Searchiq SearchIQ.This issue affects SearchIQ: from n/a through 4.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00585 Published 2024-04-10 No fix listed CWE-532

TI-2022-00689 CVE-2022-0780 · GHSA-xpxf-4p9g-j69p

SearchIQ < 3.9 - Unauthenticated Stored XSS